South Korean National Tax Service

TheSouth Korean National Tax Service is the government agency responsible for administering the nation’s tax system, including the assessment, collection, and enforcement of taxes such as income tax, value‑added tax, corporate tax, and various local levies. It provides taxpayer services through both physical offices and digital platforms, most notably the Hometax online portal, which allows individuals and businesses to file returns, make payments, and access tax information. The agency operates under the Ministry of Economy and Finance, giving it a regulatory role that extends to interpreting tax legislation, issuing guidance, and ensuring compliance across the country. Its core mission is to raise revenue fairly and efficiently while supporting fiscal policy objectives and preventing tax evasion through audit and investigation activities. As the sole national authority for tax administration, it serves the entire population of South Korea, covering all resident individuals and domestic and foreign enterprises conducting economic activity within the state’s borders. The organisation also engages in international cooperation on tax matters, participating in forums such as the OECD’s Committee on Fiscal Affairs to align domestic practices with global standards.

Headquartered in South Korea, the National Tax Service is a public sector entity wholly owned and funded by the South Korean government, with no private shareholders or parent‑company structure. Its nationwide reach is reflected in a network of regional tax offices that deliver services tailored to local jurisdictions while adhering to centrally set policies and procedures. The agency’s distinguishing attributes include its integration of advanced information technology for tax processing, its role in shaping tax policy through legislative advisory functions, and its responsibility for safeguarding sensitive taxpayer data. In March 2023, the LockBit ransomware group announced a cyberattack against the agency, claiming to have exfiltrated data and threatening public release unless a ransom was paid, highlighting the potential privacy risks associated with the large volume of personal and financial information the service manages. Although the group later stated it had published the stolen data, the actual release was not immediately confirmed, underscoring the ongoing cybersecurity challenges faced by critical government institutions. This incident illustrates the importance of robust defensive measures for organisations that handle extensive citizen data as part of their core mandate.