South Korean officials say the data was exposed as a result of a malware infection at a defector resettlement agency.