Data Breach Hits South Korean Churches, Exposing Over One Million Members' Information

Cybersecurity investigators have verified that two of South Korea's biggest Christian congregations fell victim to a coordinated hack, leaking personal data of more than one million members together with vast financial and administrative records.

The technical review indicates the intruders entered by exploiting stolen login credentials and insecure web shells left on the churches' public servers. After breaching the perimeter, they traversed linked systems, extracting information such as contact details, donation histories and internal communications.

This incident highlights a rising pattern where faith‑based groups, once considered low‑risk, are becoming appealing targets for cybercriminals after they gather large troves of personal data. South Korea, boasting one of the world’s highest internet‑usage rates, has experienced an upsurge in ransomware and data‑theft attacks in recent years, fueling calls for tighter digital protections across all sectors.

Church leaders have not revealed the full scope of the compromised material, but they confirmed the breached databases hold records that stretch back several years. They are now collaborating with law‑enforcement agencies and independent security firms to gauge the impact, inform members, and shore up network defenses, while urging congregants to watch their accounts for any irregular activity.

Specialists note the breach underscores the need for strong access‑control measures, frequent credential changes, and the elimination of unnecessary services like web shells that can act as backdoors. As the investigation proceeds, regulators may consider tightening cybersecurity rules for non‑profit entities, especially those that manage sensitive donor information.