South Korean law firm fined over massive leak of litigation files, late notice to victims

( November 21, 2025, 05:28 GMT | Official Statement) -- MLex Summary: Law firm Logos has been sanctioned by the South Korean privacy watchdog over a massive leak of litigation files containing highly sensitive personal data, receiving fines totaling 530 million won ($360,000), along with corrective and public-notice orders. According to the Personal Information Protection Commission, hackers obtained an administrator ID and password between July and September 2024, accessed Logos’s intranet and exfiltrated litigation documents totaling about 1.59TB, including complaints, judgments, bank records, criminal records, IDs and medical certificates that exposed resident-registration numbers, account numbers, criminal information and health data. Investigators found that Logos failed to restrict access by IP or similar controls, allowed external access with only an ID and password, neglected vulnerability checks, stored key identifiers without encryption and lacked clear retention and destruction standards. The regulator also faulted Logos for notifying affected individuals only on Sept. 29, 2025, more than a year after recognizing the breach.The statement, in Korean, is attached....