Hackers target two South Korean megachurches, data of 850,000 members at risk

Yoido Full Gospel Church and SaRang Church are investigating cyberattacks that may have exposed data on about 850,000 members, including financial records and internal documents. The intrusions likely occurred in August and involved a web shell, leaked passwords and AI-assisted data extraction.

• Yoido Full Gospel Church: data of about 850,000 members potentially exposed
• SaRang Church: records of 89,000 members and 286 employees affected
• Researchers recovered over 47 GB of data from attacker-controlled server
• Attacks likely occurred in August using a web shell and AI tools