The Korea Times
A recent data breach at the National Center for the Rights of the Child (NCRC), exposing sensitive personal records of adoptees, is drawing criticism from overseas adoptee groups and raising questions about the agency's credibility. The breach, which the NCRC said occurred between April 30 and May 2, came to light when prospective adoptive parents checking their application status on the newly launched online tracking system discovered that other people's adoption records were visible. The center notified affected individuals by email on May 3. Overseas adoptees say the incident is part of a broader pattern of the agency falling short of international standards in safeguarding personal data and handling adoption records. David Castlen, a Korean adoptee based in the United States and director of IT and cybersecurity at the United States Korean Rights Group (USKRG), said his individual breach notice — which he accessed on May 5 — showed it had exposed a wide range of identity-linked data, including his name, date of birth, photograph, adoption records, passport information, place of b
Go to News Site