South Korea’s cybersecurity watchdog faces staffing challenges as cyberattacks on local businesses surge nearly 50%, despite increased budgets for digital defence.

SEOUL: South Korea’s main cybersecurity watchdog, the Korea Internet & Security Agency (KISA), is grappling with a staff shortage as the number of cyberattacks on local businesses continues to rise sharply, according to new government data.

Figures submitted to lawmaker Kim Jang-kyom of the opposition People Power Party show that KISA received 1,887 reports of security breaches in 2024, marking a 47% increase from the previous year. Between January and August 2025, the agency recorded another 1,501 incidents, underscoring the rapid escalation of online threats targeting South Korean companies.

Despite this surge, KISA’s cybersecurity response team remains critically understaffed, with only 132 personnel, an increase of just nine since 2022. The lawmaker warned that the limited manpower leaves the nation vulnerable to sophisticated hacking attempts, ransomware, and data theft.

“The fact that the number of investigators at KISA increased by a single digit over the years indicates the country lacks readiness against such threats,” Kim said, stressing the need for an urgent expansion of the cybersecurity workforce.

While South Korea’s cyber defence budget grew 22% to 73.6 billion won (US$52.4 million) over the same period, experts argue that financial investments alone are insufficient without skilled personnel to manage and respond to incidents.

With cyberattacks becoming more frequent and complex, the lawmaker called for stronger collaboration between government agencies, private sector firms, and universities to build a more resilient cybersecurity ecosystem.