Week 12, 2024 security incident report

Persistent DDoS attacks disrupt T1 training and personal streams

Impact: Disruption to roster training, play-off preparations and personal streams, plus financial losses

Since March 2024, DDoS attacks targeting the T1 roster have disrupted players' individual practice and streaming. On 4 April, the team was again unable to carry out solo queue practice normally, hampering its play-off preparations. After measures were taken to protect the players, even ordinary players who played alongside them became targets, and in June T1 suspended its LoL roster's streaming indefinitely.

Personal data of over 10,000 Kyonggi University scholarship students exposed online

10kImpact: Seven categories of personal data, including names and resident registration numbers, of more than 10,000 students

A document containing the names, resident registration numbers, student ID numbers and income brackets of more than 10,000 Kyonggi University students who received National Scholarship Type II in the 2020–2021 academic years was exposed on the internet. The university did not notify affected students despite receiving a report in February 2024. The Personal Information Protection Commission (PIPC) launched a preliminary investigation in March.

Indonesian engineers investigated over attempted leak of South Korean KF-21 data

Impact: Attempted leak of KF-21 Boramae-related data

Indonesian engineers are under investigation over an attempt to leak data related to South Korea's KF-21 Boramae. Whether data was actually leaked, the volume of data and the date of the attempt have not been confirmed.

Apex Legends final postponed after players hacked mid-tournament

Impact: Tournament players hacked and final postponed

During an Apex Legends esports tournament, players were hacked in real time and cheats were injected into their games, forcing the final to be postponed. The person who claimed responsibility for the hack said it was done for fun. The person later claimed the developer had fixed the vulnerability used to attack streamers.

Alleged unauthorised attempt to access Kate Middleton's medical records

Allegations emerged that hospital staff attempted to access Kate Middleton's medical records. The UK data protection regulator reviewed the medical records breach claims and investigated whether the hospital delayed reporting the breach. Whether any information was actually leaked, and on what scale, has not been confirmed.

Malware infection at Fujitsu leads to theft of personal and customer business data

Impact: Theft of personal data and customer business information, with malware spreading to 49 computers on the internal network in Japan

In March 2024, Fujitsu discovered a malware infection and security breach in its internal systems. Its investigation confirmed the theft of personal data and customer business information. The detection-evading malware spread from the initial point of infection to 49 computers on its internal network in Japan.

Delta Dental data breach

A data breach occurred at Delta Dental. The date of the incident, the type and volume of leaked information, the cause and the response have not been confirmed.

Criminal investigation into Leicester City Council cyber-attack

Leicester City Council was hit by a cyber-attack. A criminal investigation into the attack was carried out.