South Korean authorities are investigating a major security failure that revealed the passport data of President Lee Jae-myung and 167 associates. The breach, which occurred in June, has led to an emergency government session to secure replacement travel documents.

Advertisement

Passport numbers of 167 officials exposed in June

The scale of the breach is significant, involving not only President Lee Jae-myung but also the first lady, senior presidential aides, government ministers, and security personnel. According to the report, the compromised data—which includes dates of birth and passport numbers—was uploaded to a publicly accessible website in June. This exposure has forced the South Korean government to arrange replacement passports for eveyrone affected to mitigate the risk of identity theft or travel complications.

Presidential chief of staff Lim Kwang-hyun chaired an urgent meeting on Tuesday to address the fallout. Lim Kwang-hyun described the incident as a serious threat to the safety of high-ranking government officials and their teams, emphasizing that the leak of classified overseas trip documents is a grave security failure.

A security lapse following Yoon Suk-yeol's December removal

This breach occurs during a period of intense political transition for South Korea . President Lee Jae-myung only took office in June following a snap election, which was necessitated by the removal of former President Yoon Suk-yeol. As the report notes, Yoon Suk-yeol was ousted after declaring a short-lived period of martial law in December 2024.

For a new administration attempting to project stability and strength, this data leak is a precarious start.. The transition from the Yoon Suk-yeol era to the Lee Jae-myung presidency was marked by volatility, and this security failure suggests that the administrative hand-off may have left gaps in the government's digital infrastructure and protocol management.

Why Park Doo-soon distinguishes a leak from a hack

A critical detail in the government's response is the classification of the event. Foreign Ministry spokesperson Park Doo-soon confirmed that the incident is being treated as a "data leak" rather than a "hacking incident." This distinction is vital; while a hack implies an external actor penetrating a secure system, a leak often suggests an internal error, a misplaced file, or an unauthorized disclosure by someone with existing access.

To verify this, the Foreign Ministry is conducting forensic examinations of email accounts and computers linked to the June trip . As reported, these technical inspections aim to identify exactly how a classified file ended up on a public website and whether other vulnerabilities exist within the digital systems used by the South Korean presidency.

Who uploaded the classified June trip files?

Despite the emergency meetings and the removal of the data from the public site, the most pressing question remains: who was responsible for the upload? The source does not identify a suspect or a specific department at fault, leaving it unclear if this was a malicious act by a whistleblower, a foreign intelligence operation, or a simple clerical error by a staff member.

Furthermore, it remains unknown if the leaked data was downloaded by third parties before the Foreign Ministry secured its removal. While the government is monitoring other platforms for the stolen information, the window between the June upload and the Tuesday emergency meeting suggests the data may have been exposed for weeks, leaving the 167 affected officials vulnerable to unknown risks.