Hankook Ilbo: “I Was Trying to Check Adoption Info, and Someone Else’s Passport Popped Up”—Government System Leaks Personal Data

Image credit: AI image generated by Paperslip.

Hankook Ilbo:
[Exclusive] “I was trying to check adoption info, and someone else’s passport popped up”… Government system leaks personal data.

+

Original Korean article published on May 3rd, 2026.
ChatGPT translation posted to Paperslip on May 4th, 2026.
Thank you to a Paperslip Contributor for the link.
BOLDS and blue highlighting ours.

+

[Exclusive] “I was trying to check adoption info, and someone else’s passport popped up”… Government system leaks personal data

Reporter: Won Dara
Published: May 3, 2026, 4:48 PM
Updated: May 3, 2026, 5:22 PM

“An online system created to address criticism over adoption delays has instead leaked sensitive personal information, including resident registration records and passport copies of already-adopted children.

“I logged in because they said I could check the adoption process online, and a document called ‘Adoption Confirmation’ appeared. When I opened it, I saw a copy of the passport of someone who had been adopted to the U.S.”

A website run by the Korea Children’s Rights Agency (NCRC), a public institution under the Ministry of Health and Welfare, exposed personal data of both domestic and overseas adoptees. The system had been introduced to increase transparency amid ongoing criticism of delays in adoption procedures—but instead leaked highly sensitive data of individuals whose adoptions had already been completed.

The agency had already faced criticism for losing an external hard drive containing adoptee information and for referring to adopted children as “inventory.” This incident has put it under scrutiny once again.

According to reporting by The Korea Times on May 3, personal data leaks began on April 30—the very day the website launched. Confirmed leaked information includes:

• Resident registration extracts listing names, current addresses, and adoptive parents’ names of adoptees born in the 1990s

• A U.S. passport copy and adoption confirmation documents of a woman born in the late 1990s who was adopted to the United States

The Ministry of Health and Welfare had announced the system on April 30, saying it would simplify adoption applications and allow applicants to track progress online.

How the leak happened

The issue occurred when prospective adoptive parents checked their application status. The “online adoption application system” was designed to show how far their adoption process had progressed.

However, users discovered documents belonging to other people.

One applicant said:

“I was checking my application on ‘My Page’ to see if my documents were received properly, and an adoption confirmation file appeared. When I downloaded it, it contained a passport photo and documents of an overseas adoptee.”

In some cases, full resident registration records—including the 13-digit national ID number, home address, and adoptive parents’ names—could be downloaded with a single click.

Concerns and criticism

Under Korea’s Personal Information Protection Act, sensitive identifiers like resident registration numbers must be securely managed. However, the system failed to meet those standards.

The exact number of affected individuals is still unknown. The agency and the Ministry have not yet responded to inquiries regarding:

• How the leak occurred

• How many adoptees were affected

• Whether victims have been notified

The agency only posted a notice on May 2 stating that “system maintenance has been completed and the site is now operating normally.”

Prospective adoptive parents expressed concern for those affected.

“Adoptees will likely feel shocked and hurt that their personal information was exposed without consent,” one applicant said. “I’m also worried that our future child’s information could be leaked.”

Kim Ji-won, head of a parents’ coalition advocating for adoption reform, criticized the agency:

“The agency has already been repeatedly criticized by the media and the National Assembly for poor digitization of adoption records and loss or leakage of storage media.
This incident again betrays the trust of adoptive families who entrusted their personal data to the state.”

She added:

“Is this really what state-managed adoption is supposed to look like? The agency must issue an immediate apology, hold those responsible accountable, implement measures to prevent recurrence, and provide concrete compensation for victims.”

Agency response

The agency said it is investigating the cause and scale of the incident.

A representative stated:

“We are analyzing the cause and implementing corrective measures. Based on log analysis, we will determine the exact scope of impact. We are also reviewing notification procedures in accordance with personal data protection laws.”’

Reporter: Won Dara (dara@hankookilbo.com)