South Korea's Defense Integrated Data Center

It is South Korea's Defense Integrated Data Center, responsible for integrating, storing, and managing defense-related data. This includes classified military documents, wartime operational plans, special forces contingency plans, reports to allied commanders, and critical infrastructure details. The center supports South Korean military planning and coordination with allies, handling data such as OPlan 5027. It functions as a key repository for strategic information used in defense decision-making. Its operations are centered on ensuring the availability and integrity of defense data for national security purposes.

The center manages large volumes of data, as evidenced by the 2017 breach in which 235 gigabytes of information were exfiltrated, with approximately 80% of that data remaining unidentified. In the 2016 incident, attackers compromised roughly 2,000 internet-connected and 700 intranet-connected systems using malware linked to North Korean operatives. These figures illustrate the scale of its IT infrastructure and the extent of its data holdings. The compromised systems included both internet-facing and internal network components. Such details highlight the organization's substantial digital footprint within the defense sector.

The organization specializes in safeguarding highly sensitive defense information. It has been targeted by North Korean hacking operations on multiple occasions. Its role includes storing and processing strategic war plans and allied coordination data. Such data are critical to South Korea's defense planning. The repeated focus on this center by adversarial actors underscores the sensitivity of the information it manages.

The center operates under the South Korean defense establishment. Though explicit ownership details are not provided in the source material.