KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
A South Korean NHIS employee sold health-insurance subscriber data for years; victims remain unnotified.
South Korea's National Health Insurance Service dismissed an employee in July for illegally selling personal data of health-insurance subscribers and dependents to outside parties for more than two years. NHIS executive Jeong Jae-wook said the bribes amounted to hundreds of millions of won. Lawmaker Kim Ki-woong disclosed the case at an October 16 parliamentary audit. Victims had still not been notified three months later, despite a 72-hour notice rule under the Personal Information Protection Act.
- An NHIS employee sold subscriber and dependent data for more than two years.
- Bribes totaled hundreds of millions of won, an executive said.
- The employee was dismissed in July, but victims were still unnotified.
- South Korean law requires breach notice within 72 hours of discovery.
- Organizations
- National Health Insurance Service
- Countries
- South Korea
From the original article
2 min read at databreaches.netIn today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal information of health insurance subscribers to external parties, but victims have yet to be notified of the data breach. Rep. Kim Ki-woong of the People Power Party revealed this during a parliamentary audit...
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.