Seoul National University Reports 28 Hacking Incidents and Data Leaks Since 2021

Seoul National University disclosed that it has suffered 28 hacking incidents since 2021, exposing more than 1,100 pieces of personal information belonging to students, faculty, and staff. The university submitted these figures on Sunday to Rep. Baek Seung-ah of the Democratic Party, according to a report by The Cyber Express. This submission provides a detailed breakdown of cyber activity targeting the institution over a six-year period, highlighting the volume of compromised data and the specific systems affected by these intrusions.

The data reveals a fluctuating pattern of attacks, with 10 incidents recorded in 2022, marking the highest annual total in the reported period. Eight attacks occurred in 2021, while activity dropped sharply to a single incident in 2024. No attacks were recorded in 2023. The trend reversed in 2025 with five confirmed incidents, and four more have been verified so far in 2026. These yearly figures collectively account for all 28 incidents, illustrating a resurgence in threat activity after a period of relative calm in the middle of the decade.

System Targeting and Breach Details

Departmental systems emerged as the primary target, compromised in 19 of the 28 identified incidents. Laboratory systems were hit six times, while research systems faced two attacks. One incident affected an institutionwide system. The majority of the data exposure stems from a single cyberattack in 2021, which resulted in the leak of 1,130 of the 1,132 total records. In that specific breach, attackers planted malicious software on SNU servers, enabling them to execute commands remotely.

Impact on University Community

The exposure affects a broad segment of the university community, including students, faculty members, and administrative staff. The 1,132 pieces of personal information leaked represent a significant privacy violation for those individuals. The concentration of leaks in the 2021 incident shows that a single breach can account for nearly all data exposure over a six-year span. The recent increase in incidents in 2025 and 2026 shows a rise in confirmed attacks following a lower period of activity.

What should you do?

Security professionals at educational institutions should review access logs for departmental and laboratory systems to detect unauthorized remote command execution. Administrators must ensure that server software is updated to mitigate known vulnerabilities that allow malware installation. Organizations should implement strict network segmentation to limit lateral movement if a single system is compromised. Regular audits of personal data storage practices can help minimize the impact of future breaches.

What to do and how to stay safe: Seoul National University

• Monitor server logs for signs of remote command execution or unauthorized administrative access.
• Apply security patches promptly to all departmental and research systems to close known entry points.
• Segment networks to isolate sensitive research and laboratory data from general institutional traffic.
• Review data retention policies to ensure minimal personal information is stored on vulnerable systems.

Step-by-step guide: Social Engineering Warning Signs and How to Respond

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How many hacking incidents has Seoul National University faced since 2021?

The university reported 28 hacking incidents between 2021 and 2026, with no attacks recorded in 2023.

What systems were most frequently targeted by attackers?

Departmental systems were the most frequent target, compromised in 19 of the 28 incidents.

How much personal data was leaked in total?

A total of 1,132 pieces of personal information were leaked, with 1,130 records stemming from a 2021 breach.