South Korea’s digital defense under fire for cybersecurity breaches

Criticism of South Korea’s digital defenses has increased following a series of recent cyberattacks recorded in the country. Reports indicate that at least one breach has occurred every month since the beginning of 2025.

South Korea is known for its super-fast internet, near-universal broadband coverage, and as a leader in the digital space. The country is home to global high-tech brands such as Hyundai, LG, and Samsung. However, this success has made the country a prime target for hackers and revealed that its cybersecurity defenses remain weak, prompting users to demand improvements from some of the companies affected in the past.

South Korea’s digital defense under fire for cybersecurity breaches

South Korea is currently reeling from a series of high-profile hacks targeting companies that handle services such as credit cards, telecommunications, tech startups and even government agencies, according to reports. Additionally, some of these criminals temporarily deviate from their usual targets and target South Korean nationals at several intervals. In either case, each hack leaves ministries and regulators scrambling for help.

Some critics say South Korea’s defense of cyberspace is hampered by a fragmented system of government ministries. Local media have also criticized the slow response and lack of coordination among government agencies responsible for investigating these issues. With no clear government agency tasked with first response when it comes to cyber-attacks, the country’s defense is struggling to keep up with its digital ambitions.

“The government’s approach to cybersecurity remains largely reactive, treating it as a crisis management issue rather than critical national infrastructure,” said Brian Pack, CEO of Seoul-based cybersecurity firm Teori. Park, who is also an advisor to SK Telecom’s parent company’s special committee on cybersecurity innovation, said government agencies responsible for cybersecurity work in silos, which often overlooks the development of defenses and the training of staff.

Lack of skilled professionals exacerbates the problem

Brian Pack also said the country faces a severe shortage of skilled workers in the cybersecurity field. “(The main reason for this) is that current approaches slow workforce development. This talent shortage creates a vicious cycle. Without sufficient expertise, it is impossible to build and maintain the proactive defenses needed to stay ahead of threats,” Park added.

He added that political gridlock has also encouraged the habit of creating stopgap solutions after each hacking crisis. Pak noted that while these efforts have been completed, the harder, longer-term work of building digital resilience continues to be sidelined. This year alone, South Korea has recorded major cybersecurity incidents almost every month. The incident continues to raise concerns about the resilience of the country’s digital infrastructure.

Notable incidents include a $6.2 million hack of Wemix, the blockchain arm of South Korean gaming platform Wemade, in February, a ransomware attack on Yes24, a South Korean online ticketing and retail platform, in June, and a phishing attempt by the North Korean-backed hacker group Kimski against the South Korean military with AI-generated deepfake images in July. Yes24 faced another ransomware attack in August, and users’ concerns about its security were justified.

Meanwhile, South Korea’s presidential office’s National Security Agency has pledged to step in to strengthen defense and is promoting a cross-ministerial effort to involve multiple agencies in a coordinated government-wide response. The National Security Office announced last month that it would implement “comprehensive” cyber countermeasures through an interagency plan led by South Korea’s presidential office. However, Park said that because the system is fragmented, responsibility is diluted and authority is placed in the “control tower” of the president, which risks “politicization” and overreach.