Jeonbuk National University apologizes for personal data breach affecting 320,000

Social Affairs

Jeonbuk National University apologizes for personal data breach affecting 320,000

Published: 02 Aug. 2024, 13:01 Updated: 02 Aug. 2024, 13:44

LEE SOO-JUNG
lee.soojung1@joongang.co.kr

A screen captured image of Jeonbuk National University's website on Friday. It has a banner directing website visitors to the university's statement about the recent data breach. [SCREEN CAPTURE]

Jeonbuk National University (JBNU) apologized on Thursday for a personal data breach affecting more than 320,000 alumni and students after its online information system was hacked last Sunday.

According to the university's statement, the breach exposed the private information of 322,425 active students, graduates and individuals enrolled in its Continuing Education Center from the school’s online system, known as “Oasis.”

There were three hacking attempts on Sunday — at 3 a.m., 10 p.m. and 11:20 p.m. The university discovered the data breach occurred during the second attempt, which lasted six hours.

Compromised information includes students' names, national identification numbers, mobile numbers, email addresses, residential addresses and academic details.

A total of 74 categories of information were stolen from students and graduates of JBNU and 29 categories from Continuing Education Center students.

The university completed security measures by 1 p.m. on Monday, blocking illegal access from IP addresses used in the breach, which were traced to Japan and Hong Kong.

Affected students have expressed distress and anger over the university's handling of personal data. According to Yonhap News Agency, a file containing names, majors and school ID numbers of about 4,700 students was found to be searchable on Google.

While JBNU has implemented additional cybersecurity measures, some students feel their damages cannot be fully mitigated given the information has already been stolen.

The university is collaborating with the Ministry of Education’s Cyber Security Center to investigate the attack.

JBNU has set up a dedicated page for individuals to check what information was leaked and will provide a channel for reporting damages.

Kim Soon-tae, head of the office overseeing information and innovation at JBNU, apologized for the incident, pledging the university’s commitment to preventing future breaches.

The Jeonbuk Provincial Police Agency has also launched an investigation and interviewed university officials.

BY HAN JEE-HYE, LEE SOO-JUNG [lee.soojung1@joongang.co.kr]