{"id":909,"date":"2026-04-13T12:00:00","date_gmt":"2026-04-13T11:00:00","guid":{"rendered":"https:\/\/earsonncrc.nl\/?p=909"},"modified":"2026-04-14T02:45:40","modified_gmt":"2026-04-14T01:45:40","slug":"ncrc-loses-cd-containing-adoption-central-management-system-acms-data","status":"publish","type":"post","link":"https:\/\/earsonncrc.nl\/?p=909","title":{"rendered":"NCRC Loses CD Containing Adoption Central Management System (ACMS) DATA"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">Overview<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The NCRC\u2019s Adoption Central Management System contains data pertaining to ~300,000 adoptees (domestic and international).<\/li>\n\n\n\n<li>The current whereabouts of a CD containing ACMS data are unknown.<\/li>\n\n\n\n<li>On July 23, 2021, ACMS data was exposed after an NCRC employee gave an external contractor system access.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Background on Adoption Central management system (ACMS)<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Adoption Central Management System (ACMS) is the database used by NCRC for all adoption-related affairs, including birth family searches.\n<ul class=\"wp-block-list\">\n<li>Most of the data comes from the 4 big adoption agencies (Holt, ESWS, KSS, KWS).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Data includes:\n<ul class=\"wp-block-list\">\n<li>Data pertaining to ~300,000 adoptees.<\/li>\n\n\n\n<li>Adoptee name, date of birth, place of birth, birth parents\u2019 names, ages, and addresses, procedures of the adoption, health status, social history, etc.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>In 2018, the NCRC received a CD containing data from the ACMS.\n<ul class=\"wp-block-list\">\n<li>This CD was part of the Adoption Database Migration Project, completed in 2019.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-28f84493 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h3 class=\"wp-block-heading\">CD Storage Breakdown<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The CD only contains text-based data, NOT photo scans.\n<ul class=\"wp-block-list\">\n<li>One page of text is ~2-4 KB.<\/li>\n\n\n\n<li>A CD can contain up to 700 MB of data (0.7 GB).<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The NCRC already had a database of data.<\/li>\n\n\n\n<li>The ACMS CD allowed:\n<ul class=\"wp-block-list\">\n<li>New data to be added.<\/li>\n\n\n\n<li>Existing data to be verified.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\">\n<h3 class=\"wp-block-heading\">CD Loss<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>In 2019, the NCRC confirmed receipt of the CD.\n<ul class=\"wp-block-list\">\n<li>The CD is not currently in the NCRC\u2019s inventory.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>The whereabouts of a CD containing ~300,000 adoptees\u2019 data cannot be verified.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"558\" src=\"https:\/\/earsonncrc.nl\/wp-content\/uploads\/2026\/04\/ACMS-CD-Loss-1.jpg\" alt=\"\" class=\"wp-image-912\" srcset=\"https:\/\/earsonncrc.nl\/wp-content\/uploads\/2026\/04\/ACMS-CD-Loss-1.jpg 640w, https:\/\/earsonncrc.nl\/wp-content\/uploads\/2026\/04\/ACMS-CD-Loss-1-300x262.jpg 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption class=\"wp-element-caption\">Source: Hanguk Ilbo<\/figcaption><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Personal protection act violation<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>On July 23, 2021, ACMS records were exposed after an NCRC employee gave an external contractor login credentials without proper approval, allowing outside access with no tracking of what data was viewed or copied.\n<ul class=\"wp-block-list\">\n<li>From an NCRC employee : \u201cI opened access via email so that their [the external company\u2019s] IP could connect to our agency\u2019s server. There were no established procedures. I\u2019m ashamed.\u201d<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>This may violate Korea\u2019s Personal Information Protection Act (i.e. no access limits, no logs, no secure handling).<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Sources<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/n.news.naver.com\/article\/469\/0000922863?lfrom=kakao&amp;utm_source=ig&amp;utm_medium=social&amp;utm_content=link_in_bio&amp;fbclid=PAZXh0bgNhZW0CMTEAc3J0YwZhcHBfaWQMMjU2MjgxMDQwNTU4AAGnEwBYYR7qk_zthEV4InxAjN0o2KAivce6OtMWymXRBShs8NEH9ZL_V5GKDP4_aem_hbnLg1s-0gWTH0Bok9QDnQ\">[Hanguk Ilbo] [Exclusive] \u201cWe&#8217;ve opened the firewall. The password is&#8230;\u201d 300,000 adoption records compromised<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Overview Background on Adoption Central management system (ACMS) CD Storage Breakdown CD Loss Personal protection act violation Sources<\/p>\n","protected":false},"author":1,"featured_media":910,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"give_campaign_id":0,"footnotes":""},"categories":[40],"tags":[48],"class_list":["post-909","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-activity-updates","tag-in-progress"],"acf":[],"_links":{"self":[{"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/posts\/909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=909"}],"version-history":[{"count":2,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/posts\/909\/revisions"}],"predecessor-version":[{"id":914,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/posts\/909\/revisions\/914"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=\/wp\/v2\/media\/910"}],"wp:attachment":[{"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/earsonncrc.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}