Personal data belonging to 168 people who traveled on South Korea’s presidential aircraft was exposed online in a downloadable file for months, according to reports citing KBS. The records included information on President Lee Jae Myung, first lady Kim Hea Kyung, senior officials, presidential and foreign ministry staff, security personnel and reporters. The presidential office said it had known about the exposure before the reports emerged and had taken responsive measures, while police have begun an investigation.
The spreadsheet was described as a passenger list connected to President Lee’s June trip to Belgium, Italy and France. It contained Korean and English names, affiliations, positions, dates of birth, passport numbers and passport expiration dates. Reports said the file was posted on June 2 to a paid website offering malware-scanning services and remained available for download for about five months. The published evidence does not establish who uploaded it or how the uploader obtained the list.
A passenger list containing sensitive identifiers
The presence of the president and first lady’s passport details drew particular attention, but the incident extended far beyond the presidential couple. The 168 names reportedly included Cabinet members, presidential aides, foreign ministry personnel, guards and journalists assigned to cover the presidential office. That combination exposed both personal identifiers and a record of who was associated with a sensitive overseas movement by the head of state.
The presidential office said it had recognized the issue in advance and responded, adding that relevant organizations, including the foreign ministry, would take further steps. It did not specify in the available reports when it first learned of the file, what immediate measures were taken or whether every affected person had been notified. Those unanswered points limit any assessment of how long the information remained accessible after officials became aware of it.
The foreign ministry said it viewed the exposure seriously and was conducting a detailed examination from multiple angles, including the circumstances behind the leak. An official said necessary measures would follow depending on the findings. The available evidence does not identify the original custodian of the spreadsheet, the route by which it reached the website or whether the disclosure resulted from an accidental upload, compromised access or another cause.
Investigators have not identified the disclosure route
Passport numbers, dates of birth and expiration dates can remain sensitive even after a public file is removed because copies may have been downloaded while it was accessible. The reports reviewed for this story do not document any confirmed fraudulent use or other exploitation of the data. They also do not say whether passports were replaced, credentials were invalidated or protective monitoring was offered, so the practical response for affected travelers remains unclear.
The incident also presents a security concern because the file reportedly linked identities, roles and affiliations to travel aboard the presidential aircraft. For security staff, senior officials and accompanying personnel, such a list could reveal the composition of a presidential delegation. However, the evidence does not show that subsequent travel plans, operational procedures or classified security information were included, and no resulting security breach has been confirmed.
The investigation now must establish who created and uploaded the file, which organization controlled it before publication and how many people accessed or downloaded it. Further statements from police, the presidential office and the foreign ministry may clarify the exposure timeline, the notifications and protections provided to the 168 people, and whether administrative or disciplinary action will follow. Until those findings are released, the confirmed facts remain the scope of the exposed records, their months-long online availability and the government’s acknowledgment that formal inquiries are underway.