Week 11, 2024 security incident report

Ruling finalised ordering KCB to compensate KB Kookmin Card over data leak

Impact: 53.78 million personal data records leaked

A ruling ordering Korea Credit Bureau (KCB) to pay KB Kookmin Card about 62.3 billion won in compensation over the leak of 53.78 million personal data records was finalised. The finalisation of the ruling was reported from 15 to 17 March 2024.

BT21 social media accounts hacked, then restored

Impact: BT21 social media accounts

The BT21 social media accounts of BTS and LINE FRIENDS were hacked. The accounts were later restored, and the company provided an update on the situation.

Phishing emails impersonating trade support bodies target South Korean exporters

Phishing emails impersonating the Korea International Trade Association (KITA), tradeKorea and KOTRA's buyKOREA were distributed to small and medium-sized enterprises and mid-tier companies exporting from South Korea. Disguised as requests for quotations, the emails lured recipients to external sites, where the attackers attempted to hijack accounts, spread ransomware and intercept payments.

Ozys chairman silent for 70 days after Orbit Bridge hack

A hacking incident occurred at Orbit Bridge. Ozys chairman Lee Dae-hyung's 70-day silence over the incident drew criticism; the extent of the damage and specific response measures have not been confirmed.

YouTuber with 700,000 subscribers hacked three times in a fortnight

Impact: Hacked three times in two weeks

A YouTuber with 700,000 subscribers was hacked three times in two weeks. The victim explained that the attacks came through email.

PIPC fines Very Good Tour and two others over customer data leaks

Impact: Customer data leaked

Very Good Tour and two other companies were fined by the Personal Information Protection Commission (PIPC) over customer data leaks. Negligence in preventing hacking was cited as the cause of the leaks.

Chungbuk police's official Facebook account hacked, posts tampered with

Impact: Unauthorised posting and deletion of content on official Facebook account

The Chungbuk Provincial Police Agency's official Facebook account was hacked on the night of 13 March 2024, and the attacker posted and deleted content. Police said two-factor authentication had been enabled on the account. They launched an investigation, including requesting log records from Facebook's headquarters.

Mysterious text messages spark suspicions of doctors' personal data leak

Suspicions of a leak of doctors' personal information arose after mysterious text messages were sent. Whether a leak actually took place, how it happened and its extent have not been confirmed.

Jeju secondary school form teacher leaks final-year grades in group chat

Impact: Grades of third-year high school students leaked

A form teacher at a high school in Jeju leaked the grades of final-year (third-year) students. The grades were contained in a file shared in a group chat.

AT&T Leak of Data on About 73 Million Current and Former Customers

73mImpact: Information on about 73 million current and former customers

Data on about 73 million current and former AT&T customers was leaked on the dark web. AT&T denied in March 2024 that the leaked data came from its own systems, but acknowledged customer harm later that month and reset millions of passcodes. A $177 million settlement covering two data breach cases was later reached, and a court approved it in October 2026.

About 15,000 Roku accounts hacked, unauthorised purchases made

Impact: About 15,000 accounts compromised

About 15,000 Roku accounts were compromised in a credential stuffing attack. The attackers used the accounts to subscribe to streaming services, and there were also signs that stolen accounts were sold for $0.50 each and used to buy hardware. Roku disclosed the account compromise.

Ransomware attack on Ireland's Health Service Executive affects 90,000 people

90kImpact: 90,000 people

In 2021, Ireland's Health Service Executive was hit by a Conti ransomware attack that affected 90,000 people. In December 2025, the HSE began offering victims compensation of €750.

Rapper MC Stan's YouTube channel hacked, fans warned of scams

Impact: MC Stan's YouTube channel hacked

Rapper MC Stan's YouTube channel was hacked. MC Stan told fans about the hack and urged them to be wary of scams. He later spoke of the shock he felt when the account was hacked; the specific extent of the damage and whether the channel was recovered have not been confirmed.

MarineMax cyber-attack exposes personal data of 123,494 people

123.5kImpact: Personal information of 123,494 people stolen

US yacht retailer MarineMax was hit by a cyber-attack in March 2024, and personal information of customers and employees was stolen. The Rhysida group claimed responsibility for the attack and tried to sell the stolen data for 15 bitcoin. MarineMax notified 123,494 victims, and a $1.02 million settlement was later reached in a related class action.