Week 10, 2024 security incident report
Hacking and data breach incidents newly reported 2024.03.04 ~ 03.10
In South Korea, the most prominent incident was the hacking of the official YouTube channels of Starship Entertainment and its artists, including IVE, Monsta X and Cravity, in which channel names were changed and existing videos were made private. The leak of design drawings and on-site photographs from a South Korean semiconductor equipment maker following a North Korean hack and the leak of material related to a navy destroyer programme were also major incidents, as intrusions into entertainment channels and leaks of industrial and defence material occurred together. In the tally by type combining 6 incidents in South Korea and 44 overseas, personal data leaks were the most common at 29, followed by 11 ransomware cases and 10 hacking/intrusion cases. Overseas, ransomware damage at the City of Hamilton in Canada disrupted administrative services and benefit payments, and harm occurred across various industries, including a personal data leak at Capita, service disruption at FINTRAC and disruption to beer production at Duvel.
By type
- Data breach29
- Ransomware11
- Hacking & intrusion8
Key incidents in South Korea
YouTube channels of Starship Entertainment and its artists hacked
Impact: Official YouTube channels of the agency and of IVE, MONSTA X, CRAVITY and others renamed, with existing videos made private
On 4 March 2024, the official YouTube channels of Starship Entertainment and artists including IVE, MONSTA X and CRAVITY were hacked. The channel names were changed and existing videos were made private, so they could no longer be played. The agency said it was working with YouTube to restore them.
Related reports: 5 · last report →Official YouTube channels of IVE, MONSTA X and CRAVITY hacked
Impact: Official YouTube channels of IVE, MONSTA X and CRAVITY compromised
The official YouTube channels of IVE, MONSTA X and CRAVITY were hacked. The IVE and MONSTA X channels were renamed SpaceX. Elon Musk appeared on the hacked IVE account.
Related reports: 3 · last report →North Korean hackers steal design drawings from South Korean chip equipment makers
Impact: Semiconductor design drawings and on-site photographs
North Korea hacked the servers of South Korean semiconductor equipment manufacturers and stole design drawings and on-site photographs. The National Intelligence Service (NIS) revealed in March 2024 that North Korea had hacked the servers of South Korean semiconductor equipment manufacturers.
Related reports: 3 · last report →Human rights commission rules disclosure of individual's audit documents breached privacy
The National Human Rights Commission of Korea ruled that disclosing a specific individual's audit documents infringed the right to privacy. The body that disclosed the documents, the timing of the disclosure and the specific scope of harm have not been confirmed.
Read on 매일노동뉴스 ↗Suspicions of personal data leaks raised over AliExpress and Temu
Suspicions of personal data leaks and the sale of counterfeit goods were raised over Chinese shopping apps AliExpress and Temu. Whether personal data was actually leaked, the extent of the damage and the response measures have not been confirmed.
Read on 한국경제 ↗Hanwha Ocean condemns leak of navy destroyer programme materials
Impact: Materials relating to a navy destroyer programme
Materials relating to a navy destroyer programme were leaked. Hanwha Ocean condemned the leak of the materials.
Read on Aju Press ↗
Supply-chain breaches
HWL Ebsworth hack affects Australian government agencies
Impact: Government agencies affected, including the Reserve Bank of Australia, the Australian Federal Police and Australia Post
Australian government agencies were affected by the hack of law firm HWL Ebsworth. The affected agencies included the Reserve Bank of Australia, the Australian Federal Police and Australia Post, and a full list of affected government agencies was released.
Related reports: 2 →
Key incidents in other countries
Ransomware Attack Paralyses Services in Hamilton, Canada
Impact: Paralysed council services, disrupted overtime pay, and incident-related costs of 7.4 million Canadian dollars
The City of Hamilton, Canada, was hit by a ransomware attack in February 2024 that paralysed council services and disrupted overtime pay for employees. The city decided not to pay the ransom, and incident-related costs reached 7.4 million Canadian dollars by August 2024. It later emerged that the city had known about serious cyber security weaknesses for years before the attack.
Related reports: 12 · last report →Capita ransomware attack leaks personal data
Impact: Personal data leaked
Capita was hit by a ransomware attack in 2023, resulting in a personal data breach. The cyber-attack contributed to the company's annual loss of more than £106 million. Subsequently, 8,000 people brought legal claims, and a £14 million penalty was imposed over security failings.
Related reports: 8 · last report →Canada's financial intelligence agency takes systems offline after cyber-attack
Impact: Systems taken offline
The Financial Transactions and Reports Analysis Centre of Canada was hit by a cyber-attack. The agency took its systems offline in response to the attack.
Related reports: 7 · last report →Ransomware attack disrupts production at Belgian brewer Duvel
Impact: Beer production disrupted
Belgian brewer Duvel was hit by a ransomware attack that disrupted beer production. The company said it had sufficient beer in stock. The ransomware group Stormous claimed responsibility for the attack.
Related reports: 4 · last report →Names and addresses leaked from Jersey financial services regulator
Impact: Names and addresses leaked
A data leak at the Jersey Financial Services Commission exposed names and addresses. The number of people affected, the timing, the cause and the response have not been confirmed.
Related reports: 4 · last report →