Week 14, 2024 security incident report

Election commission employee's work PC hacked, data leaked

Impact: Data on an employee's work PC

It belatedly came to light in April 2024 that the work PC of a National Election Commission employee had been hacked and data leaked. Concerns were raised about the risk of login credentials being leaked through an infostealer infection and the need to check whether the internal work network had been breached. A dereliction-of-duty complaint over the response to the hacking notification was later dropped without referral to prosecutors.

Wave of bitcoin hacking losses

Impact: A case in which 300 million won was reduced to zero

Bitcoin hacking losses occurred one after another. A case in which 300 million won was reduced to zero was cited, and the specific attack methods and responses have not been confirmed.

Seoul Gangbuk Police Station officer arrested over personal data leak

The Chungbuk Provincial Police Agency arrested an officer of the Seoul Gangbuk Police Station on suspicion of leaking personal data. The subjects and scale of the leak, when it occurred and the method have not been confirmed.

KOCCA denies hacker's claim of leaking internal data

A hacker claimed to have released internal data of the Korea Creative Content Agency. The agency said the data had been confirmed to be fake.

LCK hit by DDoS attacks again

The LCK was again affected by DDoS attacks. The specific extent of the damage and the response have not been confirmed.

Omni Hotels & Resorts customer data stolen in ransomware attack

3.5mImpact: Theft of customer personal information confirmed; Daixin claims to have obtained about 3.54 million visitor records

North American hotel chain Omni Hotels & Resorts was hit by a cyber-attack that disrupted its reservation, room access and payment systems. The Daixin ransomware gang claimed to have obtained about 3.54 million records containing visitors' names, email addresses and postal addresses and threatened to publish them. The company confirmed that customers' personal information had been stolen in the ransomware attack.

Panera Bread ransomware attack causes IT outage and data leak

Impact: Week-long IT outage and data leak

Panera Bread was hit by a ransomware attack in March 2024, and its IT outage lasted a week. It was suggested that the company may have paid a ransom after the attack. Panera Bread agreed to a $2.5 million settlement in a class action over the data leak.

Philippine science department hack breaches 2TB of data and blocks access

Impact: 2TB of data breached and system access blocked

The Philippine Department of Science and Technology was hit by a cyber-attack that defaced its website, blocked system access and breached 2TB of data. The Philippine Department of Information and Communications Technology said the attack matched the pattern of ransomware but no ransom had been demanded. It then partially restored network access and continued recovery work.

Prudential Financial hack exposes data of more than 2.5 million people

2.5mImpact: Personal information of more than 2.5 million people

US insurer Prudential Financial suffered a personal data breach in a February 2024 intrusion. It initially notified that the names, addresses, ID numbers and other details of about 36,000 people had been stolen, but later revised the number affected to more than 2.5 million. The ALPHV/BlackCat group claimed responsibility for the attack.

Ransomware attack disrupts Jackson County government systems

Impact: Disruption of information technology systems and some departmental operations

On 2 April 2024, a ransomware attack disrupted Jackson County's information technology systems and some departmental operations. The county identified a malicious email link as the cause and later said the attack was carried out by a Russian group. The network was restored on 15 April.