Week 6, 2024 security incident report

Signs of a leak of about 13,000 South Korean government public service user accounts

Impact: About 13,000 public service user accounts

The National Intelligence Service (NIS) detected signs that about 13,000 user accounts for public services of national and public institutions had been illegally leaked and traded. The attackers were found to have stolen IDs, passwords and other information from users' PCs with infostealers hidden in illegal software. The NIS urged users to refrain from using automatic login.

Hanwha Aerospace faces controversy over exposure of job applicants' CVs

Impact: Alleged exposure of personal information including job applicants' CVs

A personal data leak controversy arose at Hanwha Aerospace after job applicants' CVs were allegedly exposed to all employees. A mistake by an HR office employee was pointed to as the cause of the leak.

Daegu Dong-gu Cultural Foundation hack may have leaked data of 25 members

25Impact: Possible leak of personal information of 25 members

On 29 January, the Daegu Dong-gu Cultural Foundation confirmed that the personal information of 25 members may have been leaked in an external hack. The information involved includes IDs, names, dates of birth, gender, mobile phone numbers and email addresses. The foundation blocked the unauthorised access route and temporarily shut down its website.

Lotte Cultureworks warns of phishing scams impersonating the company

Phishing scams impersonating Lotte Cultureworks occurred. Lotte Cultureworks urged caution against phishing scams impersonating the company.

Card issuance phishing scams ahead of Lunar New Year holiday

Phishing scams occurred ahead of the Lunar New Year holiday. A case came to light in which a person who had not applied for a card nearly fell for a card issuance phishing scam.

Person involved in APTC shareholder register leak referred to prosecutors

Impact: Shareholder register leaked

APTC's shareholder register was leaked. A person involved in the case was referred to prosecutors.

Smishing texts impersonate National Health Insurance Service with refund offers

Malicious smishing texts impersonating the National Health Insurance Service (NHIS) were circulated. The scam used refund offers to lure recipients into clicking links in the messages.

Indonesian and Bangladeshi hackers claim DDoS attacks on South Korea

Indonesian and Bangladeshi hackers claimed to have carried out DDoS attacks against South Korean media outlets and the Ministry of Foreign Affairs. Whether any actual damage occurred and its extent have not been confirmed.

Alleged leak of Korea Aerospace Industries KF-21 classified data

Allegations emerged of a leak of classified data related to Korea Aerospace Industries' KF-21 Boramae fighter jet. Indonesian engineers were suspected of the leak.

Identity protection benefits expire for victims of US OPM data breach

A data breach occurred at the US Office of Personnel Management in 2015, affecting federal employees and others. Victims were provided with identity theft protection benefits, and in 2024 a bill was introduced to guarantee them for life. In May 2026, the protection benefits for affected employees began to expire.

DDoS attack disrupts access to Pennsylvania courts website

Impact: Some court website services disrupted

The Pennsylvania courts website in the US was hit by a DDoS attack over the weekend, disrupting some services. The courts resumed operations, but website access problems continued. Authorities determined there was no indication that data had been compromised.

Verizon insider leaks data of more than 63,000 employees

63kImpact: Information of more than 63,000 employees

The information of more than 63,000 Verizon employees was leaked by an insider employee. A class action lawsuit over the employee data leak was subsequently filed.

Philippines blocks attacks on government agencies by China-based hackers

The Philippines blocked cyber-attacks by China-based hackers. Philippine lawmakers demanded explanations and an investigation into the attacks targeting government agencies, and raised concerns about their implications for the defence of the West Philippine Sea.

Infosys McCamish Systems data breach

A data breach occurred at Infosys McCamish Systems. A legal investigation related to the incident was conducted; the specific scale of the breach and the response have not been confirmed.