Two major domestic churches may have had congregant information leaked due to a cyberattack

Two large domestic churches have been hit by cyberattacks, raising the possibility that members’ information, tithe and accounting records, and internal documents may have been leaked externally. According to Yonhap News on the 6th, cybersecurity firm Oasis Security said that, after analyzing materials obtained from an overseas attacker’s server, it had discovered largescale personal information and business documents related to the two churches. The company explained that there were signs the systems breached from outside had spread to internal systems as well. The analysis found signs of an ERP server intrusion and acquisition of administrator privileges at one church, and it uncovered members’ tithe records, member information, electronic approval documents, and internal messenger logs. At the other church, signs of access to the groupware using account information and intrusion into an ERPlinked system were also found, along with member information and employee information. The company added that it is necessary to inspect both the connection structure of core business systems and the authentication and authorization framework.