Data Breach Hits South Korean Churches, Exposing Info of Over One Million Members

Investigators specializing in cybersecurity have verified that a coordinated hack compromised two of the biggest Christian churches in South Korea, leaking personal data of over one million members as well as a wealth of financial and administrative information.

Technical analysis shows the perpetrators breached the networks by exploiting stolen login details together with inadequately protected web shells residing on the churches' outward‑facing servers. After penetrating the perimeter, they traversed laterally through linked systems, collecting contact information, records of donations, and internal messages.

This incident highlights an emerging pattern where faith‑based groups, once considered unlikely targets, are now appealing to hackers after they can obtain massive troves of personal data. South Korea, which boasts one of the world’s highest internet‑usage rates, has experienced a rise in ransomware and data‑theft attacks in recent years, leading to demands for tighter digital protections throughout every industry.

While church leaders have refrained from revealing the complete scope of the exposed material, they acknowledge that the compromised databases hold information stretching back several years. The churches are collaborating with police and third‑party security specialists to evaluate the impact, inform their members, and bolster their network security. They have additionally advised congregants to keep an eye on their accounts for any irregular activity.

Specialists point out that the breach underscores the need for strong access‑control measures, frequent rotation of credentials, and the elimination of superfluous services like web shells that can act as backdoors. As investigations proceed, regulators may consider tightening cybersecurity mandates for nonprofit entities, particularly those that manage sensitive donor data.