PIPC to Promote Establishment of 'Website Account Information Leak Verification System'

Yoon Jong-in, Chairman of the Personal Information Protection Commission (third from the left), is holding a video conference with the Ministry of Science and ICT, the National Police Agency, the Korea Internet & Security Agency, and major internet companies.
[Photo by Personal Information Protection Commission]

[Asia Economy Reporter Kim Heung-soon] The Personal Information Protection Commission announced on the 8th that it has taken measures to respond, including the establishment of a 'Website Account Information Leakage Verification System,' as domestic website account information is being widely and illegally distributed on the internet.

The Personal Information Protection Commission and the Ministry of Science and ICT analyzed illegal personal information databases (DBs) obtained through overseas websites that share personal information leaked by hacking and other means, confirming that account information (email addresses and passwords) from 1,362 domestic websites, totaling 23.46 million records, was included in the DB. Most of the account information in the illegal DB was found to belong to small and medium-sized private and public websites.

The Personal Information Protection Commission is requesting website administrators responsible for the affected account information to verify whether account information has been leaked to ascertain the truth. It has also notified major companies to prepare for cyberattacks and requested email service providers to implement additional protective measures for account users. If account information leakage is confirmed during website operator inspections, the Commission will conduct an official investigation.

The Commission plans to continuously detect and delete any further postings or distribution of the DB on the internet and will request investigations into those who habitually post illegal DBs. Additionally, it will establish a 'Website Account Information Leakage Verification System' that allows citizens to directly check whether their account information has been leaked.

The system will begin operation next year by linking the account information in this illegal DB with a 4 billion-record DB obtained through Google. From 2022, the Commission plans to expand the website account information DB in cooperation with major domestic internet companies.

On the same day, the Personal Information Protection Commission held a video conference at the Government Seoul Office with the Ministry of Science and ICT, the National Police Agency, the Korea Internet & Security Agency, and major internet companies to share the status of user protection measures related to the illegal account information DB and discuss plans for establishing the account information leakage verification system. They also agreed to continuously detect and delete further postings or distribution of the DB on the internet and request investigations into habitual illegal DB posters.

Yoon Jong-in, Chairperson of the Personal Information Protection Commission, stated, "We will firmly respond to the illegal distribution of personal information to alleviate public anxiety and prevent damage," and urged, "Citizens should also practice personal information protection rules such as regularly changing passwords and using two-factor authentication login."