Government to Mandate Certified Secure IP Cameras in Hospitals, Pools, and Public Facilities

In response to a recent surge in large-scale IP camera hacking incidents, the South Korean government has announced comprehensive new measures requiring security-certified IP cameras in facilities that handle sensitive personal spaces, including hospitals, swimming pools, spas, fitness centers, daycare facilities, and other public venues. The move comes after authorities uncovered that more than 120,000 compromised IP cameras were using weak or publicly known passwords, leaving countless individuals vulnerable to privacy invasion and illegal video leaks.

The Ministry of Science and ICT, the Personal Information Protection Commission, the Korea Communications Commission, and the National Police Agency jointly announced a series of strengthened policies aimed at reducing video leak incidents, protecting user privacy, and improving the overall security ecosystem surrounding IP camera manufacturing, distribution, and installation.

Why the Government Declared an Emergency: 120,000 IP Cameras Already Compromised

Investigations earlier this year revealed that a major hacking group infiltrated over 120,000 Internet Protocol (IP) cameras installed across households, businesses, and public facilities. Authorities found that many devices were still operating with default passwords or simple numeric codes, making them extremely vulnerable to automated brute-force attacks.

The hacked cameras were located in homes, motels, clinics, office buildings, and even semi-restricted spaces such as changing rooms and rest areas—leading to severe privacy concerns and a potential surge in illegal content distribution. Because users often overlook password updates or fail to activate advanced security settings, the government determined that relying solely on user awareness was no longer sufficient.

Mandatory Use of Security-Certified IP Cameras in High-Risk Facilities

To prevent future intrusions, the government plans to legally mandate the use of security-certified IP cameras in locations where video exposure carries high personal risk. These locations include:

• Hospitals and medical facilities
• Swimming pools, saunas, and public baths
• Fitness centers and sports facilities
• Childcare centers and nursing homes
• Any other environments where individuals may partially or fully change clothing

Certification will require manufacturers to meet stringent international-level security standards. More importantly, security features must be integrated from the product design stage, including:

• Mandatory complex password setup during initial installation
• Encrypted communication protocols by default
• Automatic firmware update capabilities
• Secure cloud storage requirements for devices that upload video externally

The government has committed to fast-tracking related legislation, noting the urgency and severity of the recent hacks.

Immediate Recommendations for Users: Change Your ID and Password Now

Authorities warn that the 120,000 compromised IP cameras are still at risk and urge all users to immediately implement the following security measures:

• Change the default ID and password to a complex, unique combination
• Enable two-factor authentication if supported
• Turn off remote access features unless absolutely necessary
• Install the latest firmware updates provided by the manufacturer
• Verify whether your IP camera brand has recently been associated with security breaches

Telecommunications companies will assist in identifying users whose devices were involved in the breach, and direct instructions for password modification will be issued promptly.

Support for Victims: Content Removal, Legal Assistance, and Medical Counseling

Victims of IP camera hacking often face severe psychological stress, reputational damage, and long-term exposure risks. To mitigate these harms, the government will provide:

• Immediate deletion and blocking of sexually exploitative or illegally distributed videos
• Free legal consultation and support for filing complaints
• Mental health counseling and trauma care for affected individuals
• Prioritized investigations into businesses with large-scale video leaks

Authorities also emphasized that they will intensify crackdowns on:

• Operators of illegal video distribution websites
• Individuals purchasing or downloading illicit footage
• Hackers attempting to access camera networks for exploitation

Strengthening Security at Every Stage: From Manufacturing to End-Users

Last year, the government unveiled a full-spectrum strategy covering manufacturing, import, retail, and user operations. However, due to the rapid rise in cybercrime targeting video devices, officials concluded that stronger, faster measures were needed.

Key components of the reinforced national strategy include:

• Mandatory security protocols for all manufacturers operating in Korea
• Enhanced tracking and reporting requirements for imported camera brands
• Retail-level verification ensuring only certified secure devices are sold
• National awareness campaigns highlighting the dangers of weak passwords

What This Means for Businesses and Households

For businesses operating in privacy-sensitive sectors, compliance will no longer be optional. Companies using uncertified cameras may face administrative penalties, legal liability, or suspension orders in cases of data breaches.

For general households, the new rules will improve product quality and reduce the risk of private video exposure. Although device updates may require minor inconveniences, the overall benefits—including safer remote monitoring of children, pets, and home security—are expected to outweigh the challenges.

Conclusion: Government Moves Toward a Safer, More Secure Digital Environment

With the rapid rise of cyber-intrusions and illegal video exploitation, the government’s decision to implement stronger regulations marks a significant step forward in protecting citizens' privacy. By mandating security-certified IP cameras, enforcing stronger password protocols, and offering robust victim support, Korea aims to create a safer environment for both individuals and businesses.

Authorities stress that public cooperation is essential—regular password updates, proper device management, and immediate reporting of suspicious activity remain critical for preventing future intrusions.