Where to Report if You've Been Hacked? A Collection of Official Response Agencies
How to Submit Reports According to Purpose: Crime Investigation, Technical Response, Personal Information, and Financial Damage
If you experience hacking damage, it can be confusing to know whether to first contact the police, KISA, personal information organizations, or financial companies. Each agency has different roles, so reporting to one agency doesn’t mean that account recovery, crime investigations, personal information disputes, and payment suspensions will all be handled automatically. It's important to categorize the type of damage and the required actions when submitting reports.
If you want a crime to be investigated and punished, reporting to the police is crucial, while technical responses to intrusions of private information systems should go through KISA. If personal information has been leaked or misused, you should look into the personal information infringement reporting and dispute resolution procedures. If there were any account transfers or card payments, you must immediately contact the financial institution separately from reporting.
Before making a report, preserve links, screen captures, account notifications, transaction records, conversations with others, and the time of occurrence as close to the original as possible. Do not directly contact those suspected of being perpetrators or assume identity solely based on an IP address.
This list organizes the official agencies available in the country and their roles. There may be follow-up procedures, such as visiting the police station after online submission, so it’s important to read the latest guidance on the submission screen to the end. In the case of threats to life or body or ongoing crimes, contacting emergency reporting at 112 takes precedence over online complaints.
Cyber Crime Reporting System ECRM
Cyber Crime Reporting System ECRM is an official function or service that can be used to report, consult, or provide information on cyber crimes like hacking and fraud online. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
When you’ve experienced a real crime that requires criminal punishment, calmly check the recent records and guidance on the reporting screen, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
After online submission, confirm if a visit to the police station or additional statements are required. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
Emergency Report 112
Emergency Reporting 112
Emergency Reporting 112 is an official function or service that can be used to report ongoing crimes and urgent threats to life and body. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
When issues extend beyond account problems to threats, stalking, or immediate harm, calmly check recent records and guidance on the reporting screen again, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
This is not a general security consultation number, so clearly describe your current risk and location. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
KISA 118 Consultation Center
KISA 118 Consultation Center is an official function or service that can be used for internet security consultation regarding hacking, smishing, personal information infringement, and more. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
If you have difficulty determining the type of damage and necessary technical or reporting agencies, calmly check the recent records and guidance on the reporting screen, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
Criminal investigations or financial payment suspensions should be requested separately from the police and financial companies. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
KrCERT/CC Incident Report
KrCERT/CC Incident Reporting
KrCERT/CC Incident Reporting is an official function or service that can be utilized to report incidents of ransomware, DDoS, and hacking in private sector information and communication systems. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
If you suspect or confirm breaches of a corporate or service system, calmly check the recent records and guidance on the reporting screen, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
The legal reporting targets and deadlines should be confirmed by the latest guidance and the organization's legal or security representatives. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
Personal Information Breach Report Center
Personal Information Infringement Reporting Center
Personal Information Infringement Reporting Center is an official function or service that provides personal information infringement consultation and reporting procedures. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
If you believe that personal information has been collected, used, provided, or leaked without authorization, calmly check the recent records and guidance on the reporting screen, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
Criminal investigations and claims for damages or dispute resolution may require separate procedures. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
Personal Information Dispute Mediation Committee
Personal Information Dispute Mediation Committee is an official function or service that can be used to apply for mediation of disputes caused by personal information infringement. Rather than judging by the name alone, it’s essential to first verify the operating entity and the official domain.
If there is a need to mediate issues of compensation or remedy from a business, calmly check the recent records and guidance on the reporting screen, and capture details of unfamiliar items such as time, device, and location. If recovery or reporting is necessary, this record can serve as the material that explains the situation.
First, confirm the application requirements, required evidence, and the relationship with other remedies. Do not use this service to test other people's accounts or systems, and only utilize it within the scope of your own property or with explicit permission.
By first clarifying the purpose of your report, it becomes easier to choose the right agency. Requests for criminal investigations, technical support to prevent system proliferation, remedies for leaked personal information, and freezing any money that has already been lost are all different procedures. If one incident spans multiple areas, you may need to submit reports to related agencies individually.
Completing online reporting doesn’t mean all procedures are finished. The police ECRM may require you to visit a police station and provide a statement depending on the type of incident, and enterprises may have separate legal reporting deadlines to adhere to. Keeping a list of your submission number, the responsible agency, call times, and submitted materials will facilitate follow-up inquiries.
It's important to maintain authenticity and chronological order when collecting evidence rather than gathering large quantities. Do not re-edit messages or repeatedly run infected files; preserve screens, file names, and transaction times as they are. Only provide sensitive information like identification cards or authentication numbers to the official submission screen of the agency confirmed as requiring it.
Let’s take measures to prevent the spread of damage along with making reports. Depending on the situation, this includes ending account sessions, contacting financial companies, disconnecting connected devices, and changing passwords.
이 포스팅은 쿠팡 파트너스 활동의 일환으로, 이에 따른 일정액의 수수료를 제공받습니다.
댓글 0
로그인 후 댓글을 작성할 수 있습니다.
첫 댓글을 남겨보세요.
이런 리스트는 어때요?
이런 리스트도 추천해요
여기서 멈추기엔 아쉽잖아?
다음에 뭘 볼지 고민하는 시간이 제일 아까워.
주사위가 대신 골라줄게 — 무슨 리스트가 튀어나올지는 굴려봐야 알지.
안 누르면… 평생 궁금하지 않겠어? 👀