South Korea faces rising cyber threats with frayed defenses

In February 2025, a South Korean supplier for a major domestic conglomerate became one of the latest casualties in a rapidly escalating wave of cyberattacks. The ransomware group Lynx stole more than 12 gigabytes of data, including sensitive documents such as blueprints, test results, non-disclosure agreements, and personal information. The company supplies key components for home appliances, batteries, and displays—making it a critical, if vulnerable, node in the global tech supply chain.

“Hackers are increasingly targeting subcontractors with weaker cybersecurity as a backdoor into major firms,” said a local security expert. These so-called “supply chain attacks” are multiplying, fueled in part by the rise of generative AI.

Despite the growing threat, South Korea still lacks a comprehensive, coordinated cybersecurity infrastructure. Public agencies rely on aging IT systems, while many private companies treat information security as a cost center rather than an investment. More than a third of corporate cybersecurity personnel are outsourced.

Read more at The Chosun Daily