It has been confirmed that more than 1 million attempts at "cyber terrorism" targeting the Constitut..

South Korea's Constitutional Court has reported over 1.16 million cyber terrorism attempts since 2017, with the volume of attacks steadily escalating, underscoring persistent and advanced threats to critical national infrastructure. Although no damage from these specific attempts has been reported due to successful blocking, the broader context of past successful breaches by North Korean hacker organizations and significant data leaks impacting major corporations like SK and Lotte Card highlights a systemic and evolving cybersecurity risk landscape across South Korea's public and private sectors, necessitating increased vigilance and investment in security.

Analysis

It has been confirmed that more than 1 million attempts at "cyber terrorism" targeting the Constitutional Court have been made in the past nine years. Critics point out that caution is needed as even state agencies are threatened amid a series of massive information leaks due to hacking attacks targeting companies such as SK and Lotte Card. According to data submitted by Rep. Choo Mi-ae (Democratic Party of Korea), chairman of the National Assembly's Legislative and Judiciary Committee, from the Constitutional Court on the 5th, a total of 1,167,000 attempts at cyber terrorism were made against the Constitutional Court from 2017 to August this year. The number of cyber terror attempts has steadily increased every year from 85,000 in 2017 to 187,000 last year. This year, more than 80,000 attempts have already been detected by August. However, no cases of damage due to the successful detection and blocking of the actual terrorist attack have been reported yet. Cyber terrorism takes place through various channels, such as distribution of malicious code and transmission of phishing emails. This can lead to damage such as hacking, personal information leakage, and service paralysis. From 2021 to 2023, a North Korean hacker organization hacked the court's computer network for a long time and stole internal data on a large scale. Even after the incident at that time, it was not even known how the hacker broke in and what data was leaked, raising concerns about secondary damage such as abuse of personal information. To prevent these threats in advance, the Constitutional Court has established an automatic blocking system and is operating a specialized department dedicated to computer network security. In 2025, when the impeachment trial of former President Yoon Suk Yeol was held, it was confirmed that there were a total of nine cases of online terrorism and intimidation, including a notice of murder of a judge and a notice of arson by the Constitutional Court. Representative Choo Mi-ae said, "As cyber threats are becoming more advanced, we need to raise awareness and strengthen systematic security in advance." South Korea's Constitutional Court has faced a significant and escalating volume of cyber threats, with over 1.167 million attempts recorded between 2017 and August 2023. The annual frequency of these attacks has more than doubled, increasing from 85,000 in 2017 to 187,000 in 2022, signaling a persistent and intensifying threat environment. While the Court reports no damage from these specific attempts due to successful detection and blocking, this contrasts sharply with the broader context of a successful, large-scale data breach by a North Korean hacker organization on the court system between 2021-2023. This, combined with historical attacks on major corporations like SK and Lotte Card, highlights a systemic vulnerability across both public and private sectors. The nature of the threats, explicitly linked to a state actor and targeting a critical government body during politically sensitive times, elevates this from a technical issue to a significant geopolitical and national security risk, suggesting that cybersecurity will be a mandatory and growing area of expenditure and policy focus in South Korea.

Key Decisions for Investors

• The documented escalation of state-sponsored cyber attacks creates a strong secular tailwind for the cybersecurity sector in South Korea; investors should consider increasing exposure to firms specializing in advanced threat detection and those poised to win government and critical infrastructure contracts.
• Investors holding positions in South Korean companies, especially within the financial and technology sectors, must re-evaluate the idiosyncratic risk associated with potential cyber breaches, scrutinizing corporate cybersecurity budgets, incident response plans, and insurance coverage.
• The explicit link to North Korean actors embeds a geopolitical risk premium into South Korean assets, warranting a cautious stance and potentially the use of hedging strategies during periods of heightened political tension on the peninsula.