South Korea's Defense Acquisition Program Administration disclosed that 10 internet-connected PCs were compromised in late 2018 after abnormal traffic was identified from agency IP space. Reporting described leaked internal materials, delayed response, and a vendor administrator account in a data-storage prevention solution as a suspected intrusion path, with private security sources saying the method resembled North Korean hacker-unit activity.