Week 49, 2023 security incident report

North Korea's Andariel steals some 250 files including South Korean defence technology

Impact: About 250 files including defence technology, and bitcoin worth about 400 million won

North Korean hacking group Andariel stole some 250 files, including South Korean defence technology such as anti-aircraft weapons. It extorted bitcoin worth about 400 million won, and evidence emerged that bitcoin was transferred to North Korea.

JobPlanet denies hack amid claims member data leaked on dark web

Allegations surfaced that personal data of JobPlanet members had been leaked on the dark web. JobPlanet countered that the hacking claims were untrue and that it does not collect resident registration numbers. Whether personal data was actually leaked has not been confirmed.

Massive data leak hits some 800 cosmetics companies

Impact: Data leak affecting some 800 cosmetics companies

A massive data leak occurred in the cosmetics industry. Some 800 companies were affected; how the leak occurred and the response measures have not been confirmed.

Cosmetics industry data leaked en masse from Korea Testing & Research Institute

Impact: Data leak affecting some 800 cosmetics companies

Cosmetics industry data was leaked en masse from the Korea Testing & Research Institute (KTR). Some 800 companies were affected; how the leak occurred and the response measures have not been confirmed.

Dongjak District Office faces data leak and redevelopment association allegations

A controversy arose over a personal data leak involving the Dongjak District Office. Allegations were also raised that it encouraged the direct establishment of a redevelopment association, and whether a leak occurred, the scale of damage and the response have not been confirmed.

Sejong Institute president Lee Sang-hyun's email hacked and accessed without authorisation

Impact: Unauthorised access to the president's email account

The email account of Sejong Institute president Lee Sang-hyun was hacked and accessed without authorisation. The National Intelligence Service (NIS) detected the intrusion, and the perpetrators had not been identified at the time. No further damage reports from other researchers have been confirmed.

Norton Healthcare Ransomware Attack Exposes Personal Data of 2.5 Million People

2.5mImpact: Personal data of 2.5 million people

US provider Norton Healthcare was hit by a ransomware attack in May 2023, leaking personal data of 2.5 million patients, employees, family members and others. The leaked material included names, Social Security numbers, health insurance information and some financial and ID details. The company disclosed the breach that December, and payments under an $11 million lawsuit settlement have since begun.

Nissan cyber-attack in Australia and New Zealand affects about 100,000 people

100kImpact: About 100,000 customers, employees and others in Australia and New Zealand

A cyber-attack on Nissan's Australian and New Zealand operations affected about 100,000 customers and employees. The Akira ransomware group claimed responsibility for the attack. Nissan confirmed that customer information had been accessed and later disclosed the scale of the impact.

New Zealand's Te Whatu Ora COVID-19 vaccination data leaked

Impact: COVID-19 vaccination data

COVID-19 vaccination data held by New Zealand health agency Te Whatu Ora was leaked. The agency brought in international experts to investigate, and Barry Young, who was charged over the incident, pleaded not guilty. Following the leak, vaccination workers voiced fears for their personal safety.

Dameron Hospital data breach after cyber-attack

Dameron Hospital in Stockton suffered a data breach after a cyber-attack. A compensation claims process followed, and the hospital settled the data breach class action for $650,000.

Patients face extortion after Fred Hutchinson Cancer Center data breach

Impact: Patient information leaked and patients targeted with extortion

A cyber-attack on Seattle's Fred Hutchinson Cancer Center led to a data leak, and patients received extortion demands. The cancer centre warned patients not to pay money in response to threatening spam emails. UW Medicine and the cancer centre notified patients of the data breach and security incident.