The National Aviation Museum of Korea has been fined 98 million won ($72,000) by the government after personal information of more than 11,000 people was leaked.
The Personal Information Protection Commission (PIPC) announced at its 26th plenary meeting on Thursday that it ordered the museum to pay the fine and publicly disclose the disciplinary action for violating personal information protection regulations.
The museum suffered a hacking incident in January last year. The hacker obtained administrator account access and downloaded personal information of 11,029 individuals, including names, user IDs, gender, dates of birth, addresses and contact numbers. The hacker subsequently sent smishing text messages containing malicious app links to some members.
The investigation found that the museum had shared three administrator accounts among approximately 20 internal and external staff members. The museum also allowed external access to administrator pages without implementing measures such as restricting access by IP address or requiring authentication certificates in addition to IDs and passwords. Investigators also confirmed that the museum failed to monitor access logs of personnel handling the data.
