Currently-unknown hackers uploaded malware to servers belonging to the South Korean Resettlement Agency. The malware was planted after being sent from an internal email to several other email addresses within the department. The stolen database contained the names, birth dates, and addresses of 997 North Korean defectors who had been resettled by South Korea. At this time, there is no evidence suggesting who is behind the attack or why. Some believe that the North fears that the knowledge of North Korea possessed by the defectors could have adverse effects on the peace talks for North Korea. Several South Korean agencies are currently evaluating the attack and the malware to determine who was behind the attack.
