Over 5 mil. resident registration number records leaked in Korea over 6 years

Resident registration numbers were exposed more than 5.05 million times in personal data breach cases that triggered enforcement action by the Personal Information Protection Commission and the Financial Supervisory Service over the past six years. An analysis by Rep. Han Chang-min’s office counted 130 cases from 2021 to September 2026. The National Center for the Rights of the Child recorded the most exposures, followed by Yanolja, NHN Wetoo, Lotte Card, Duo Information and LG Uplus.

The analysis excluded three cases whose breach scale could not be determined, leaving a combined 5.05 million resident registration number exposures.

The National Center for the Rights of the Child had 1.16 million exposures across three data breach cases.

More than 2.78 million exposures involving connecting information and duplication information were also recorded.

There were four breach cases involving connecting information or duplication information, with Yanolja accounting for 1 million exposed duplication information records and Modetour Network for 948,393 connecting information and duplication information records.

Published Oct 5, 2026 3:49 pm KST

Resident registration numbers were exposed more than 5.05 million times in personal data breach cases that prompted enforcement action by the Personal Information Protection Commission (PIPC) and the Financial Supervisory Service (FSS) over the past six years, data showed Sunday.

According to an analysis by the office of Rep. Han Chang-min of the Social Democratic Party, 130 cases involving the exposure of resident registration numbers were subject to enforcement action between 2021 and September 2026.

Excluding three cases for which the scale of the breach could not be determined, the remaining cases involved a combined 5.05 million exposures of resident registration numbers.

By institution or company, the National Center for the Rights of the Child accounted for the largest number of resident registration number exposures, with a combined 1.16 million instances across three data breach cases.

It was followed by Yanolja with 1 million, NHN Wetoo with 524,620, Lotte Card with 452,313, Duo Information with 427,464 encrypted records and LG Uplus with 297,117 encrypted records.

Han's office said the analysis was based on data submitted by PIPC and the FSS, as well as publicly available enforcement decisions.

It added that the figure represents the total number of records exposed across individual breach cases, rather than the number of people affected, as the same person's data may have been exposed multiple times.

More than 2.78 million exposures involving connecting information (CI) and duplication information (DI) were also recorded.

CI is generated from a person's resident registration number and functions as an "online resident registration number," allowing the same individual to be identified across different services. DI is used to determine whether the same person has registered for the same website more than once.

There were four breach cases involving CI or DI. Among the cases for which the scale of the breach could be determined, Yanolja accounted for 1 million exposed DI records, Modetour Network for 948,393 CI and DI records and Lotte Card for 836,382 CI records.

过去六年间，韩国个人信息保护委员会和金融监督院共处理了505万起个人数据泄露事件，其中涉及居民登记号码的泄露次数超过505万次。韩国众议员韩昌民办公室的分析显示，2021年至2026年9月期间共发生130起此类事件。其中，国家儿童权利中心泄露次数最多，其次是Yanolja、NHN Wetoo、乐天信用卡、Duo Information和LG Uplus。

分析排除了三起无法确定违规规模的案件，最终共计有 505 万个居民登记号码暴露。

美国国家儿童权利中心在三起数据泄露事件中遭受了 116 万次信息泄露。

此外，还记录了超过 278 万起涉及连接信息和重复信息的泄露事件。

共有四起涉及连接信息或重复信息的泄露事件，其中 Yanolja 泄露了 100 万条重复信息记录，Modetour Network 泄露了 948,393 条连接信息和重复信息记录。

发布于2026年10月5日下午3:49（韩国标准时间）

周日公布的数据显示，过去六年里，在个人信息保护委员会（PIPC）和金融监督管理总局（FSS）采取执法行动的个人数据泄露案件中，居民登记号码被曝光超过505万次。

根据社会民主党议员韩昌民办公室的分析，2021 年至 2026 年 9 月期间，共有 130 起涉及居民登记号码泄露的案件受到执法行动。

除三起无法确定泄露规模的案件外，其余案件共涉及 505 万个居民登记号码泄露。

按机构或公司计算，国家儿童权利中心造成的居民登记号码泄露数量最多，在三起数据泄露事件中，共计泄露了 116 万次。

紧随其后的是 Yanolja（100 万条加密记录）、NHN Wetoo（524,620 条加密记录）、乐天卡（452,313 条加密记录）、Duo Information（427,464 条加密记录）和 LG Uplus（297,117 条加密记录）。

韩的办公室表示，该分析基于PIPC和FSS提交的数据，以及公开的执法决定。

声明还补充说，该数字代表的是各个数据泄露事件中泄露的记录总数，而不是受影响的人数，因为同一个人的数据可能被多次泄露。

还记录了超过 278 万起涉及连接信息 (CI) 和重复信息 (DI) 的泄露事件。

CI 由个人的居民登记号码生成，作为“在线居民登记号码”，用于在不同服务中识别同一人。DI 用于确定同一人是否在同一网站上多次注册。

共有四起涉及CI或DI的数据泄露事件。在可以确定泄露规模的事件中，Yanolja泄露了100万条DI记录，Modetour Network泄露了948,393条CI和DI记录，Lotte Card泄露了836,382条CI记录。