Week 2, 2024 security incident report
Hacking and data breach incidents newly reported 2024.01.08 ~ 01.14
In South Korea, the leak of SEMES semiconductor cleaning technology to China came to the fore as a case of damage to core industrial technology, and a former researcher's sentence was increased on appeal. As the establishment of a security monitoring centre for the national employment computer network was pushed forward following the Worknet hack, smishing that exploited Coupang purchases caused fraud losses of tens of millions of won, and Anonymous BD claimed to have hacked CCTV in South Korea and Japan, showing that targets of intrusion ranged across employment networks, e-commerce and video devices. Of the 30 new incidents in total, hacking/intrusion was the most common at 17, followed by 6 personal data leaks, 4 ransomware cases and 3 phishing/smishing cases. Overseas, the hijacking of the US Securities and Exchange Commission's X account and a false ETF announcement that led to sharp swings in the price of bitcoin attracted the most attention, while a ransomware attack on Toronto Zoo leaked staff and visitor information spanning a long period and the possible exposure of personal data that could affect the entire population of Brazil was also raised.
By type
- Hacking & intrusion17
- Data breach6
- Ransomware4
- Phishing & smishing3
Key incidents in South Korea
Former SEMES researcher who leaked chip cleaning technology to China gets heavier sentence on appeal
Impact: Leak of semiconductor cleaning technology
A former SEMES researcher leaked semiconductor cleaning technology to China. The former researcher's sentence was increased on appeal.
Read on 연합뉴스 ↗Construction of cyber security control centre for national employment network begins after Worknet hack
A hack occurred at the job portal Worknet. Work subsequently began on building a cyber security control centre for South Korea's national employment information network, while the date of the hack, the extent of the damage and the attack method have not been confirmed.
Read on 디지털데일리 ↗Smishing scam exploiting Coupang purchases nets tens of millions of won
Impact: Fraud losses of tens of millions of won
A new type of smishing scam exploiting Coupang purchases caused losses of tens of millions of won. The specific victims, the date of the incident and the follow-up response have not been confirmed.
Read on YTN 사이언스 ↗Anonymous BD claims to have hacked South Korean and Japanese CCTV
Anonymous BD, which had attacked South Korea's Ministry of Foreign Affairs, claimed to have hacked CCTV cameras in South Korea and Japan. However, most of the footage was not exposed.
Read on 보안뉴스 ↗
Key incidents in other countries
Hacked SEC X account posts false ETF announcement
Impact: X account takeover and false post causing sharp swings in Bitcoin's price
On 9 January 2024, the US Securities and Exchange Commission's X account was hacked and a false post announcing approval of spot Bitcoin ETFs was published, causing Bitcoin's price to swing sharply. The SEC denied the approval, and the FBI launched an investigation. A SIM-swapping attack was later confirmed, and a man involved in the incident pleaded guilty and was sentenced to prison.
Related reports: 21 · last report →Toronto Zoo ransomware leaks staff and visitor data
Impact: Employees' Social Insurance Numbers and addresses, about 20 years of visitor data, and transaction and credit card information
Toronto Zoo was hit by a ransomware attack in 2024, and employee and visitor information was stolen. The stolen data included employees' Social Insurance Numbers and addresses as well as about 20 years of visitor data, and visitor transaction and credit card information was leaked on the dark web. The zoo said the health and welfare of its animals were not affected, and in 2025 it issued a final update on the breach.
Related reports: 7 · last report →THE ICONIC customer accounts hacked, fraudulent orders placed
1Impact: Fraudulent orders and payments on customer accounts; one customer lost $1,000
Customer accounts at Australian online retailer THE ICONIC were hacked, resulting in fraudulent orders and payments. The company promised to refund affected customers. The company later said its internal systems had not been compromised.
Related reports: 4 · last report →Gypsy Rose Blanchard's TikTok account hacking claims surface shortly after prison release
Claims emerged that Gypsy Rose Blanchard's TikTok account had been hacked just days after her release from prison. Blanchard responded to the hacking claims, but her specific position and response have not been confirmed.
Related reports: 4 →Massive personal data leak could affect entire Brazilian population
Impact: Possible exposure of personal data of the entire Brazilian population
A massive amount of Brazilian personal data was leaked. It has been suggested that the exposure could extend to the entire Brazilian population, but the actual extent of the damage has not been confirmed.
Related reports: 3 · last report →