South Korea’s intelligence agencies have launched an investigation into a suspected cyber attack carried out by North Korean hackers. The attack targeted the company responsible for the ON-Nara electronic document management system, widely used by government institutions in the country.
According to reports by the media, the incident took place towards the end of 2024, but it was only recently discovered by special services prompting the investigation. The hackers managed to breach the organization’s servers during the attack, potentially gaining access to sensitive data. Authorities believe that North Korean groups may be responsible for the breach.
Preliminary information suggests that the cyber attack was meticulously planned to understand the system’s structure, software components, and potentially extract internal documents from government ministries. While the National Intelligence Service confirmed the hacking incident, details are being withheld due to an ongoing investigation.
The ON-Nara system, introduced in 2005, is a critical tool for processing and managing official documents within state departments. Compromising the system could result in the leakage of highly confidential government information.
South Korean authorities are actively investigating the incident. The extent of data breach and potential damages are yet to be determined. If North Korea’s involvement is confirmed, stricter measures and sanctions may be imposed in response.
In a recent development, the United States, Japan, and South Korea issued a joint warning to the blockchain industry about the looming threat posed by North Korean hackers. Authorities caution that the DPRK’s cyber program not only endangers these countries but also poses a significant risk to the global financial system’s stability.