The number of reported infringement incidents submitted to the Korea Internet & Security Agency (KISA) this year in the first half has increased sharply compared to three years ago.
According to KISA on the 1st, the number of reported infringement incidents in the first half of this year was 1,034, which is about 2.2 times higher than the 473 incidents in 2022. The numbers have been steadily increasing, with 664 incidents reported in 2023 and 899 in the previous year. Infringement incidents include distributed denial of service (DDoS), ransomware, and hacking.
KISA explained that recent infringement incidents occurred frequently in areas closely related to people's lives, such as YES24 and SGI Seoul Guarantee. According to the Information and Communications Network Act, affected corporations must report the date, cause of occurrence, and details of the damage to KISA within 24 hours from the time they recognize the infringement incident. After measures have been taken by the affected corporations, the Ministry of Science and ICT follows up with compliance checks and corrective orders to prevent the recurrence of infringement incidents.
Meanwhile, leakage incidents involve the external leak of information among infringement incidents and include hacking, negligence, and intentional acts. In the case of a leakage incident, if sensitive or unique identification information of more than 1,000 people is leaked and certain criteria are met, the items of personal information, the time of occurrence, response measures, and responsible departments must be reported to the Personal Information Protection Commission or KISA. During the investigation process of personal information leakage incidents, the Commission is responsible for receiving leakage reports, requesting data submission, verifying and analyzing data, and conducting field investigations, while KISA handles information collection, composition of necessary verification items, file analysis, and interviews.