Week 22, 2024 security incident report
Hacking and data breach incidents newly reported 2024.05.27 ~ 06.02
Between 27 May and 2 June, seven incidents were recorded in South Korea, with the hacking of Boram Sangjo, which leaked five items of members' personal data such as names and phone numbers, and the trading of key data on the dark web following a ransomware attack on a South Korean car parts company standing out. Personal data issues continued across various industries and the public sector, including an investigation into Tesla's personal data leak and privacy violations, the leak of emails of Ministry of Government Legislation officials and an alleged leak of Hyundai Marine & Fire Insurance customer data, and past incidents were revisited and responsibility for leaks was pursued. Across all types in South Korea and abroad, personal data leaks and hacking/intrusion cases were the most common at 19 each, followed by 9 ransomware cases. Overseas, a claimed leak of personal data of 560 million Ticketmaster customers and data leaks at several Snowflake customers using stolen account credentials stood out, and ransomware halted the operation of computers and online systems at Seattle Public Library.
By type
- Data breach19
- Hacking & intrusion16
- Ransomware10
- DDoS1
Key incidents in South Korea
Tesla personal data leak and privacy violations under scrutiny
Issues of personal data leaks and privacy violations at Tesla came to the fore. In May 2024, the South Korean government began looking into the matter.
Related reports: 2 · last report →Boram Sangjo hack leaks five categories of member personal data
Impact: Five categories of member personal information, including names and phone numbers
Boram Sangjo was hit by a hacking attack in late May 2024, leaking members' personal information. The leaked information covered five categories, including names and phone numbers, while the number of people affected and the response have not been confirmed.
Related reports: 2 · last report →Core data of South Korean car parts maker traded after ransomware attack
Impact: Company's core data traded on the dark web
A South Korean car parts company was hit by ransomware. The company's core data was traded on the dark web, and the company's name, the scale of the damage and the response have not been confirmed.
Read on 보안뉴스 ↗Accountability vowed over leak of 'History Journal: That Day' production team's personal data
Impact: Personal data of 'History Journal: That Day' production team
A statement was made that those responsible for the leak of personal data of the production team of 'History Journal: That Day' would be held to account. The scale of the leak, how it occurred and who specifically is responding have not been confirmed.
Read on 미디어스 ↗Ministry of Government Legislation officials' emails leaked to hacker site
Impact: Emails of Ministry of Government Legislation officials
Emails belonging to officials at the Ministry of Government Legislation were leaked to a hacker site. The scale of the leak, how it occurred and the response have not been confirmed.
Read on 조선일보 ↗Lessons from GS Caltex personal data leak revisited
A past personal data leak at GS Caltex and the lessons drawn from it were revisited. The specific date of the incident, the scale of the leak and the response have not been confirmed.
Read on 보안뉴스 ↗Hyundai Marine & Fire Insurance faces allegations of mis-selling and customer data leak targeting middle-aged and older people
Allegations were made that Hyundai Marine & Fire Insurance engaged in unfair sales practices aimed at middle-aged and older people and leaked customer information. Whether the allegations are true, the scale of the damage and the response have not been confirmed.
Read on NBN미디어 ↗
Key incidents in other countries
Ticketmaster hack leads to massive leak of customer personal data
560mImpact: Claimed leak of personal data of 560 million customers
In May 2024, Ticketmaster customers' personal data was leaked in a hack, and the hackers claimed to have stolen data on 560 million people. Parent company Live Nation confirmed the hack and the theft of personal data. Customers were offered enrolment in a security service, and a class action was later pursued and a hacker involved pleaded guilty.
Related reports: 56 · last report →Snowflake customer data stolen using credentials harvested by infostealers
Impact: Significant volumes of data stolen from several customers
Credentials linked to infostealer malware were used to steal Snowflake customer data. Several customers, including Ticketmaster, were affected, and Mandiant confirmed significant data theft and attacks aimed at extortion. Lawsuits were subsequently brought against Snowflake, AT&T and Ticketmaster.
Related reports: 51 · last report →Ransomware knocks Seattle Public Library's online systems offline
Impact: Computer and online system operations halted
The Seattle Public Library was hit by a ransomware attack over the Memorial Day weekend in May 2024, halting its computers and online systems. The library worked to restore its systems and network, but the incident's effects persisted into August. In September, systems were restored and normal operations resumed, and efforts to strengthen technology security were pursued.
Related reports: 16 · last report →Leaked Google internal documents expose thousands of privacy violations
Impact: Thousands of privacy violations exposed
Documents leaked from Google revealed thousands of privacy violations. These included cases of collecting sensitive information such as children's voices, number plates and car-sharing routes.
Related reports: 5 · last report →Russia suspected in cyber-attack on Polish state news agency
Poland's state news agency was hit by a cyber-attack. Polish ministers and officials raised the possibility that Russia was involved in the attack. The specific extent of the damage and recovery measures have not been confirmed.
Related reports: 5 · last report →