Week 7, 2024 security incident report

Between 12 and 18 February 2024, six new cyber security incidents were recorded in South Korea, with a suspected unauthorised access to an Office 365 administrator account at the Incheon Metropolitan City Office of Education, raising concerns over the leak of personal data of about 110,000 people, standing out. Account compromise emerged as a key trend, as an email hack linked to the presidential office leaked sensitive information such as the president's schedule and materials on overseas trips, and the theft of 8 million passwords by misusing browser auto-login spread. At PlayDapp, the hijacking of administrator privileges led to the unauthorised issuance of a total of 1.79 billion PLA tokens, as damage from account and privilege takeovers extended to crypto assets. Overseas, 47 new incidents were recorded, with harm in the public and healthcare sectors standing out, including the leak of some 210,000 records from the Philippines' Department of Education and a ransomware attack on a Romanian healthcare platform that encrypted data at 26 hospitals and led a further 74 medical facilities to cut off internet access as a precaution.