Cybersecurity double standards must end

A recent cyberattack on the Financial Security Institute (FSI) has highlighted the troubling issue of double standards in cybersecurity. The significance of the incident, which saw thieves steal approximately 200 documents containing personal credit information and details of 300 customers, barely made headlines, as cyber breaches have become almost routine. The victims were employees in the banking sector, with their names and dates of birth among the stolen data.

This incident occurred amidst a series of security breaches at state-run organizations, including the Ministry of the Interior and Safety and the Bank of Korea. Such breaches have not resulted in any punitive measures or disadvantages for these institutions. The lack of accountability stands in stark contrast to the severe penalties imposed on private companies for similar offenses.

Coupang, for instance, faced a record-high fine of 630 billion won ($470 million) after more than 33 million customers' personal data was compromised and for other violations. Prior to that, SK Telecom also faced significant repercussions for data breaches.

The contrasting treatment of public and private sector institutions in the realm of cybersecurity raises serious concerns. It is imperative to establish consistent regulations and penalties across the board, ensuring that no entity, whether public or private, can operate with impunity when it comes to data security.