Week 18, 2024 security incident report
Hacking and data breach incidents newly reported 2024.04.29 ~ 05.05
Between 29 April and 5 May 2024, six new incidents were recorded in South Korea, with the leak of personal data of 1,233 people due to a Government24 source code error attracting the most attention with 40 articles. Personal data management problems stood out in the public sector, including the police providing personal data to an impersonator and a furore over the Ministry of Land, Infrastructure and Transport's leak of personal data of jeonse fraud victims. Defacement hacking of a dental website and hacks that redirected South Korean university and institutional websites to illegal sites also occurred, as website intrusions appeared across multiple sectors. Overseas, ransomware damage at London Drugs led to shop closures, setbacks in reopening and a leak of employee information, and leaks of Marriott customers' passport information and of licence and ID information of 3.5 million people in the US state of Oregon were also reported.
By type
- Data breach13
- Hacking & intrusion8
- Ransomware2
Key incidents in South Korea
Government24 source code error leaks personal data of 1,233 people
1.2kImpact: Personal data of 1,233 people
In early April 2024, a source code error related to civil documents and tax payment certificates on Government24 leaked the personal data of 1,233 people. An investigation by the Personal Information Protection Commission (PIPC) found missing tests and unaddressed vulnerabilities, amongst other issues. The PIPC imposed penalties including a fine of 273 million won on the Ministry of the Interior and Safety.
Related reports: 40 · last report →Police officer duped by fake detective leaks personal data of 7 women
7Impact: Personal information, including addresses and resident registration numbers, of seven women
A police officer complied with an identity check request from a man posing as a detective and gave him the addresses, resident registration numbers and other details of seven women. Police notified the victims of the leak and took protective measures such as patrols around their homes.
Related reports: 3 · last report →Cheongju Heungdeok's Bongmyeong police box leaks data of 7 people to impersonator
7Impact: Personal information of seven people
The Bongmyeong police box of Cheongju Heungdeok Police Station leaked the personal information of seven people after complying with a wanted-person check request from someone impersonating a police officer. The specific date and follow-up response have not been confirmed.
Read on 보안뉴스 ↗Korean dental practice website left unattended for days after defacement
A Korean dental practice website was defaced by an Indonesian hacker. The hacked site was left unprotected for several days.
Read on 보안뉴스 ↗Many Korean university and institution websites hacked to redirect to illegal sites
Impact: Numerous Korean university and institution websites
Numerous hacked websites of Korean universities and institutions were discovered. Visiting these sites redirected users to illegal adult and gambling sites, raising concerns about secondary harm. The specific organisations affected and the response have not been confirmed.
Read on 데일리시큐 ↗Personal data leak scare involving jeonse fraud victims on MOLIT website
A scare over a leak of personal information of jeonse (lump-sum lease deposit) fraud victims arose on the website of the Ministry of Land, Infrastructure and Transport. The actual scale of the leak, when it occurred and the response have not been confirmed.
Read on 채널A ↗
Key incidents in other countries
London Drugs ransomware attack closes shops and leaks staff data
Impact: Shop closures and leak of corporate data and employee information
London Drugs closed its shops after a cyber-attack in 2024 and later confirmed it was a ransomware attack. It initially said there was no evidence of a data breach, but the attackers claimed to have stolen employee data and demanded a ransom of millions of dollars. Stolen corporate data and employee information were later published.
Related reports: 15 · last report →Marriott Starwood breach exposes customer passport data and more
Impact: Data including customer passport information
A data breach occurred at Marriott's Starwood in 2018, and the leak of customers' passport information went undetected for four years. Marriott admitted that for five years it had wrongly claimed that encryption was in use at the time. It later agreed to pay $52 million and strengthen security to settle investigations into the breach, and in 2025 it won an order from a US appeals court voiding a related class action.
Related reports: 14 · last report →Germany blames Russia for cyber-attack, recalls ambassador
Germany named Russia as being behind cyber-attacks targeting the country and warned of consequences. It later recalled its ambassador to Russia over the cyber-attacks. The specific organisations affected and the scale of the damage have not been confirmed.
Related reports: 5 · last report →Driving licence and ID data of 3.5 million Oregonians stolen
3.5mImpact: Driving licence and ID card personal information of 3.5 million people
The driving licence and ID card personal information of 3.5 million people in the US state of Oregon was stolen in a data breach. A lawsuit was filed against the State of Oregon on behalf of the victims. When the incident occurred and the specific breach method have not been confirmed.
Related reports: 2 →London Drugs cyber-attack disrupts shop reopening
Impact: Disruption to store operations and reopening
London Drugs suffered disruption to its store operations after a cyber-attack on Sunday. As of 29 April 2024, it was not known when the stores would reopen.
Related reports: 2 · last report →