"380 Shadows"... NIA Confidential Contract Documents Repeatedly Leaked Externally

Sensitive Data Leaked Over Three Years, Uncovered by Internal Audit
Referred Without Detention on September 10

An employee of the National Information Society Agency (NIA) was found to have illicitly leaked confidential contract documents to external parties over a period of three years. The total of 380 leaks led to the employee being referred to the authorities without detention, according to a police investigation announced on September 10, exposing a serious vulnerability in the security systems of public institutions.

Daegu Police Agency logo. Photo by Kwon Byunggun

◆ Repeated Leaks Over Three Years Uncovered by Internal Audit

The incident was uncovered during an internal audit conducted by the agency. While tracking digital network records, multiple abnormal access attempts were detected, revealing the employee’s systematic and repeated data leaks. The leaked materials were confidential contract documents prohibited from external disclosure, carrying a sensitive nature that could fundamentally undermine the institution’s credibility.

◆ Exposing Lapses in Public Institution Management

Experts point out that this incident cannot be dismissed as mere individual misconduct. “The fact that hundreds of confidential contract documents were leaked externally over an extended period without detection indicates that the agency’s internal control systems were effectively neutralized,” they said. This is being analyzed as a representative case that exposes critical weaknesses in the security management of public institutions overall.

◆ Police Investigation and Need for Institutional Reform

The police are focusing their investigation on the employee’s motives, the actual destinations of the leaked data, and whether the information was used. In response, the agency has announced plans to thoroughly review its internal security systems and strengthen security training for all employees.

The 380 repeated data leaks demonstrate not just individual misconduct, but also the structural weaknesses of the public sector’s security systems. Restoring public trust must begin with proactive prevention, not just reactive measures after incidents are discovered.

This content was produced with the assistance of AI translation services.