Beware of IP Camera Hacking: "Change the Default Password Immediately"

"Public-Private Cooperation Campaign to Strengthen IP Camera Security"

Recommendation to Regularly Change Passwords and Verify Certifications

The Personal Information Protection Commission has urged the public to regularly change passwords in order to prevent hacking of Internet Protocol (IP) cameras.

On April 22, the Commission announced that, together with related ministries, local governments, and major professional organizations, it will launch a "public-private cooperation campaign to strengthen IP camera security." This is a follow-up measure to the “IP Camera Security Management System Advancement Plan” jointly announced by relevant ministries in December of last year.

IP cameras are widely used in households and small businesses because they allow users to check footage anytime and anywhere via smartphones and can be easily installed at a low cost. However, hacking incidents that exploit security vulnerabilities in IP cameras have continued to occur. According to the National Police Agency, four suspects were arrested at the end of last year for hacking into 120,000 IP cameras in Korea and stealing video footage. Some of these videos were found to have been distributed on illegal overseas websites.

The Commission recommended that users must change the default account and password when purchasing an IP camera. Keeping the default settings makes it easy for hackers to break in via the internet, which can lead to real-time leakage of the daily lives of household members or business customers, resulting in privacy violations. Passwords should be at least eight characters long and include letters, numbers, and special characters, and should be regularly updated.

In addition, the Commission emphasized that in locations where physical exposure is expected—such as medical institutions, fitness centers, waxing salons, and massage parlors—Internet access to IP cameras should be restricted. Under the Personal Information Protection Act, installation of such cameras is legally prohibited in areas like restrooms and changing rooms.

Furthermore, the Commission advised that when purchasing an IP camera, users should check whether the product has obtained information security certification from a domestic specialized institution and choose safer products. It especially warned that products purchased through overseas direct purchases may face difficulties with future security updates or after-sales service (A/S), so buyers should exercise caution.

Yang Cheongsam, Secretary General of the Personal Information Protection Commission, said, "While IP cameras are being used conveniently in people’s daily lives, the leakage of footage can cause serious privacy violations. Simply by periodically changing the user account and password, most damages can be prevented, so I strongly urge everyone to implement these security measures," he said.

This content was produced with the assistance of AI translation services.