Week 4, 2024 security incident report

Personal data of around 236,000 Worknet members leaked at Korea Employment Information Service

236kImpact: Personal information of around 236,000 Worknet members

The personal information of around 236,000 people was leaked from Worknet, operated by the Korea Employment Information Service. An investigation by the Personal Information Protection Commission (PIPC) found inadequate defences against credential stuffing. On 25 January 2024, the PIPC imposed a fine of 8.4 million won on the Korea Employment Information Service and issued a recommendation for improvement.

Around 11,000 member records leaked from National Aviation Museum of Korea's online learning platform

11kImpact: Around 11,000 member records

Around 11,000 member records, including users' names, dates of birth, addresses and contact details, were leaked from the National Aviation Museum of Korea's online aviation learning platform. Obituary-themed smishing messages impersonating the museum were also sent, raising concerns about further harm to members. Shared administrator accounts and poor access controls later came to light, and a fine of 98 million won was imposed over the personal data leak.

Alleged leak and sale of Korea Post members' personal data

Allegations were raised that the personal information of Korea Post members had been leaked. A hacker claimed to have already sold the data, but Korea Post said there were no signs of a leak.

No charges in personal data leak case for which public corporation branch head apologised

The head of a branch of a public corporation apologised for a personal data leak. Police concluded there were no grounds for charges in the case. The corporation's official name, the scale of the damage and the reasons for the decision were not disclosed.

Smishing impersonating Kakao services spreads malicious app

Smishing messages impersonating Kakao services spread, using keywords such as 'Kakao Pick' and 'safe remittance' to lure recipients into claiming small money transfers. The Android malicious app installed via the link was found to collect device information and digital certificate information and send it to the attackers' server.

Early-year crypto hack worth 100 billion won sparks insider responsibility debate

Impact: Crypto assets worth in the 100 billion won range

A hack involving crypto assets worth in the 100 billion won range took place early in the year. Insider responsibility was raised in connection with the incident, but the affected organisation and the specific attack method have not been confirmed.

Korea Exchange admits personal data leak without disclosing details

Korea Exchange acknowledged a personal data leak. Details such as the scale of the leak, the data items involved and the timing have not been confirmed.

Sanctions imposed and security upgrades pursued after Medibank data breach

Australia's Medibank suffered a personal data breach in a 2022 cyber-attack. The regulator alleged that stolen credentials and a lack of multi-factor authentication enabled the intrusion and that the response was also delayed. Australia and other countries imposed sanctions on a Russian hacker involved, and Medibank decided to invest A$126 million in security improvements after the incident.

Repository of 26 billion leaked records from multiple services discovered

26bnImpact: About 26 billion leaked records

In January 2024, a data repository containing about 26 billion leaked records linked to multiple services including LinkedIn, Dropbox and X was discovered. It reportedly also included more than 60 million records linked to more than 16,000 South Korean sites and 164 million records linked to Vietnam. The possibility was later raised that the repository contained new breach data.

Personal data of 533 million Facebook users leaked online

533mImpact: Personal data of 533 million Facebook users

In 2021 personal data of 533 million Facebook users was leaked online. In November 2024 a German court ruled that users affected by the leak could receive compensation.

Veolia North America water division hit by ransomware

Impact: Leak of personally identifiable information

Veolia North America's water division was hit by a ransomware attack. A leak of personally identifiable information in connection with the attack also came to light; the specific extent of the damage and the response measures have not been confirmed.

Bucks County ransomware attack takes down emergency dispatch system

Impact: Emergency dispatch system down for several days

The emergency dispatch system of Bucks County, Pennsylvania, was out of action for several days owing to a cyber-attack. 911 calls continued to be received, and the authorities later determined that Akira ransomware had been used in the attack.