South Korea Fines Government Agencies $187K Over Data Breaches Linked to Security Failures On May 28, 2026, South Korea’s Personal Information Protection Commission (PIPC) imposed fines totaling 281 million won ($187,000) on the Ministry of the Interior and Safety for security lapses that exposed sensitive personal data through its Government24 and Shared Nuri public service portals. The breaches stemmed from source-code errors, insufficient testing, and unresolved authentication vulnerabilities, allowing unauthorized access to records including education documents, tax certificates, resident registration details, and internal contact files via Google search. In a separate incident, the Rural Development Administration, two affiliated agencies, and contractor MisoTech were also penalized for a breach affecting 575,000 records, stored on an improperly secured network-attached storage (NAS) system. The PIPC’s findings highlight systemic failures in access controls, vulnerability management, and third-party oversight within government digital infrastructure. Official statements on the sanctions were released in Korean.