CYBERSECURITYTRACKER
Permanent story citation

KR: NHIS Employee Sold Data, Victims Uninformed for Three Months

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10526

As cited

Copy frozen at (site build).

breaches incidents

KR: NHIS Employee Sold Data, Victims Uninformed for Three Months

A National Health Insurance Service (NHIS) employee in South Korea was dismissed for illegally selling health insurance subscribers' personal information to external parties. Victims of the data breach have not been notified three months after the incident, according to a parliamentary audit revelation.

Why it matters: South Korean health insurance subscribers face identity theft and fraud risks from exposed personal data, and delayed breach notification violates standard disclosure obligations that practitioners must enforce organizationally and regulatorily.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary