On September 9, 2024, the Seoul Metropolitan Police Agency announced an investigation into a major data breach at Ewha Womans University, which has compromised the personal information of approximately 80,000 students. The breach exposed 22 categories of sensitive data, including phone numbers, resident registration numbers, addresses, and details of some students’ parents or legal guardians. The university has reported that the data of students who matriculated between 1982 and 2002 was particularly affected.
Following the detection of the breach, Ewha Womans University took immediate action to cut off unusual access to its database. Despite these efforts, the extraction of personal information could not be entirely prevented. In response, the university has implemented a service to provide affected students with details on the leaked information and is offering counseling services to address their concerns. The university has also reported the incident to the Ministry of Education and the Personal Information Protection Commission and is working with these agencies to prevent further damage.
The breach has led to considerable frustration among Ewha students and alumni, who have expressed their dissatisfaction on platforms such as Everytime, an anonymous university student community. Comments have highlighted the severe impact of the breach, with some students noting that their parents’ personal information was also compromised. Criticism has been directed at the university’s cybersecurity measures, with accusations that the system was inadequately protected.
This incident follows a similar breach at Jeonbuk National University in late July 2024, where personal information of over 320,000 students and graduates was leaked. Despite regular information security inspections, Jeonbuk National University experienced significant data exposure, highlighting ongoing vulnerabilities in academic institutions’ cybersecurity practices. Both incidents underscore the urgent need for enhanced data protection measures within educational institutions.
Reference: