US Forces Korea suffers data breach

A database breach has exposed the personal details of 16,000 South Koreans who work for the US Military. The compromise came to light on May 28, 2014 and the alert was sent to the affected parties on June 5, 2014

Yesterday brought news that there was a database breach that exposed the personal details of 16,000 South Koreans who work for the US Military. The compromise came to light on May 28, 2014 and the alert was sent to the affected parties on June 5, 2014.

Not too bad for a reasonably quick turnaround from breach identification to communication with the victims. 

From USFK:

letter

While there was personal information leaked there is no mention of any financial information having been accessed by the intruders. The Korean Identification Number is a unique identifier for citizens much in the same vein as the Social Security Number in the United States and the Social Insurance Number in Canada. In South Korea however, an individual's birth date is embedded in the number.

Here is an example of the format for the Korean Identification Number, 123456-1234567. The first half of the number has the birthday YYMMDD and the seventh digit identifies the person's gender. 

Rather odd that they would not have an actual random UID. 

To comment on this article and other CSO content, visit our Facebook page or our Twitter stream.
Insider: Hacking the elections: myths and realities
Notice to our Readers
We're now using social media to take your comments and feedback. Learn more about this here.