Week 51, 2023 security incident report
Hacking and data breach incidents newly reported 2023.12.18 ~ 12.24
Between 18 and 24 December 2023, three new cyber security incidents were recorded in South Korea, with the hacking of IP cameras that leaked private videos, which were then exposed on Telegram, attracting the most attention with five articles. A leak of personal data of 8,477 users of the online bookshop kbookstore and a series of hacks at five universities were also confirmed, showing damage spanning household devices, online bookshops and educational institutions. Across all types in South Korea and abroad, personal data leaks were the most common at 32, followed by 12 hacking/intrusion cases and 8 ransomware cases, and in the healthcare sector knock-on damage spread from Prospect Medical Holdings to Humana Inc. and from Fred Hutchinson Cancer Center to UW Medicine. There were 50 new overseas incidents, with a data leak affecting about 35.88 million Comcast Xfinity customers, a ransomware attack on VF Corporation that affected 35.5 million people and disrupted business operations, and disruption at about 70% of petrol stations in Iran standing out.
By type
- Data breach31
- Hacking & intrusion12
- Ransomware8
- Malware1
Key incidents in South Korea
Hacked IP cameras leak private videos, exposed on Telegram
Impact: Leak of private IP camera videos
IP cameras were hacked, and private videos were leaked and exposed on Telegram. Exposure of the hacked footage continued until 3 January 2024. Chinese hackers were named as being involved in IP camera hacking incidents in South Korea.
Related reports: 5 · last report →Personal data of 8,477 users of online bookshop kbookstore leaked
8.5kImpact: Personal information of 8,477 users
The personal information of 8,477 users of online bookshop kbookstore was leaked. The leaked personal information was published on Telegram.
Read on 보안뉴스 ↗Five universities hit by a string of hacks, and the aftermath
Impact: Five universities hacked
Five universities were hit by a string of hacking attacks. The situation at the affected universities after the attacks was covered, but the specific scale of damage and response have not been confirmed.
Read on 보안뉴스 ↗
Supply-chain breaches
Cigna also affected by Prospect Medical's 2023 data breach
Impact: Insurers including Cigna affected
Cigna was added to the list of insurers affected by Prospect Medical's 2023 data breach. The specific information exposed and the extent of the damage have not been confirmed.
Related reports: 2 · last report →
Also affected: 2Patients face extortion after Fred Hutchinson Cancer Center data breach
Impact: Patient information leaked and patients targeted with extortion
A cyber-attack on Seattle's Fred Hutchinson Cancer Center led to a data leak, and patients received extortion demands. The cancer centre warned patients not to pay money in response to threatening spam emails. UW Medicine and the cancer centre notified patients of the data breach and security incident.
Related reports: 6 · last report →
Key incidents in other countries
Comcast Xfinity leaks data of around 35.88 million customers
35.9mImpact: Personal data of 35,879,455 customers
At Comcast's Xfinity, the information of 35,879,455 customers was stolen through a breach of Citrix servers. The leaked information included usernames and hashed passwords, as well as some customers' contact details, dates of birth and last digits of Social Security numbers. Xfinity disclosed the incident and notified customers in December 2023, and Comcast subsequently agreed to a $117.5 million settlement.
Related reports: 35 · last report →GTA 6 development footage leaked in Rockstar Games hack
Impact: GTA 6 development footage
Arion Kurtaj, a teenage hacker affiliated with Lapsus$, hacked Rockstar Games and leaked GTA 6 footage. He carried out the hack using a hotel TV, a mobile phone and an Amazon Fire TV Stick. In December 2023, a UK court ordered him to be detained indefinitely in a secure hospital.
Related reports: 19 · last report →VF Corporation ransomware attack affects 35.5 million people
35.5mImpact: 35.5 million people affected and disruption to business operations including order fulfilment
US clothing company VF Corporation had some IT systems encrypted and data including personal information stolen in a cyber-attack in December 2023. The system outages disrupted e-commerce, wholesale customer service and order fulfilment. In January 2024, the company acknowledged that 35.5 million people had been affected.
Related reports: 14 · last report →Cyber-attack disrupts 70% of Iran's petrol stations
Impact: Operations disrupted at about 70% of Iran's petrol stations
On 18 December 2023, Iran's fuel supply network was hit by a cyber-attack, disrupting operations at about 70% of petrol stations. Iran's oil minister disclosed the cyber-attack, and a hacker group linked to Israel claimed responsibility.
Related reports: 11 →Breach at US law firm Orrick exposes personal data of more than 600,000
600kImpact: Personal information of more than 600,000 people
US law firm Orrick, Herrington & Sutcliffe suffered an intrusion in 2023 that affected the personal information of more than 600,000 people. The attacker accessed a network file share where client-related materials were stored. The firm agreed to an $8 million settlement in a lawsuit over the client data breach, and the court later gave final approval to the settlement.
Related reports: 8 · last report →