Korea Atomic Energy Research Institute confirmed that an unidentified external actor accessed some systems through a VPN system vulnerability, after which the institute blocked attacker IP addresses and applied VPN security updates. The institute said the hacking subject and damage scope were still under investigation with relevant authorities, while public reporting had raised suspected North Korean involvement and alleged attempted concealment.