This image shows the main page of the National Center for the Rights of the Child (NCRC) website / Captured from NCRC website

A recent data breach at the National Center for the Rights of the Child (NCRC), exposing sensitive personal records of adoptees, is drawing criticism from overseas adoptee groups and raising questions about the agency's credibility.

The breach, which the NCRC said occurred between April 30 and May 2, came to light when prospective adoptive parents checking their application status on the newly launched online tracking system discovered that other people's adoption records were visible. The center notified affected individuals by email on May 3.

Overseas adoptees say the incident is part of a broader pattern of the agency falling short of international standards in safeguarding personal data and handling adoption records.

David Castlen, a Korean adoptee based in the United States and director of IT and cybersecurity at the United States Korean Rights Group (USKRG), said his individual breach notice — which he accessed on May 5 — showed it had exposed a wide range of identity-linked data, including his name, date of birth, photograph, adoption records, passport information, place of birth and information about his adoptive family.

“What concerns me most is the combination of identity data with adoption-related records,” Castlen told The Korea Times. “My notice was numbered 43, which suggests that at least dozens of individuals may have been affected.”

He added he has not yet experienced any direct secondary harm, but has noticed a rise in calls from unfamiliar numbers since the breach.

For adoptees, the implications go beyond a typical data leak. Accessing such records is often part of a long and emotionally complex process of tracing their origins and identity.

“For me, and for many adoptees, privacy is not just about security — it is about dignity and control over our own story,” Castlen said.

Castlen also highlighted the heightened stakes in his case, noting that he is currently seeking to restore his Korean citizenship — a step he described as reclaiming part of his identity — and questioning whether even that process can remain secure.

Source: Korea Times News