Week 24, 2024 security incident report
Hacking and data breach incidents newly reported 2024.06.10 ~ 06.16
Between 10 and 16 June, seven incidents were recorded in South Korea, with the leak of 2,900 South Korean customer records following the hacking of TAG Heuer and a court ruling upholding a fine against Nutricore over the leak of personal data of 110,000 people emerging as the main matters. As disputes over sanctions and responsibility for personal data leaks continued, mishaps in information handling also occurred, such as a petitioner's name and resident registration number being mistakenly sent to all public officials in Incheon. Across all types in South Korea and abroad, personal data leaks (25) and hacking/intrusion cases (20) made up the majority, and knock-on damage from Snowflake to Ticketmaster, Pure Storage and Advance Auto Parts stood out. Overseas, 46 incidents were recorded, with disruption to healthcare and public services standing out, as a ransomware incident at London healthcare providers exposed 5.4 million patient records and led to the postponement of more than 1,100 operations.
By type
- Data breach22
- Hacking & intrusion18
- Ransomware7
- DDoS1
Key incidents in South Korea
TAG Heuer hack leaks 2,900 South Korean customer records
2.9kImpact: 2,900 records of South Korean customer information
TAG Heuer was hacked, leaking 2,900 records of South Korean customer information. The leak came to light on 16 June 2024; the specific data items leaked and the response have not been confirmed.
Related reports: 3 →Court upholds fine on Nutricore over leak of 110,000 people's data
110kImpact: Personal information of 110,000 people
Nutricore was fined more than 400 million won after the personal information of 110,000 people was leaked. On 10 June 2024, a court ruling that the fine was justified was reported.
Related reports: 2 →Complainant's personal data mistakenly sent to all Incheon civil servants
Impact: Complainant's name and resident registration number
While transferring a complaint, an official at a community service centre designated the wrong recipients, sending the complainant's name and resident registration number to all civil servants of Incheon city and its subordinate counties and districts. The internal network messages containing the personal data were recalled.
Read on 연합뉴스 ↗Samjjeomsam sales up 40% amid personal data leak controversy
Samjjeomsam has been embroiled in controversy over exaggerated advertising and a personal data leak. Despite the controversy, its sales rose 40%; the specific circumstances of the personal data leak and the extent of the damage have not been confirmed.
Read on 땅집고 ↗Indonesian hackers claim DDoS attacks on five South Korean websites
Evidence emerged that Indonesian hackers had launched DDoS attacks on South Korean public websites and others over content disparaging Indonesia on a Korean online forum. The attackers claimed to have attacked five sites on 12 June and presented screenshots checking the sites' connection status.
Read on 보안뉴스 ↗Joyzen fined 3.6 million won over personal data theft
Impact: Personal data stolen
An investigation by the Personal Information Protection Commission (PIPC) found that Joyzen, a custom-built PC sales site, had neglected its duty to take security measures, leading to the theft of personal data in a hack. Taking its financial situation into account, the PIPC waived a penalty surcharge and decided on a fine of 3.6 million won and a corrective order, among other measures.
Read on 이데일리 ↗IMG Tech chief executive denies responsibility for personal data leak
IMG Tech chief executive Kwon Sun-young denied the company's responsibility for a personal data leak. Kwon said the matter should be checked with Hongik University.
Read on 위키리크스한국 ↗
Supply-chain breaches
Snowflake customer data stolen using credentials harvested by infostealers
Impact: Significant volumes of data stolen from several customers
Credentials linked to infostealer malware were used to steal Snowflake customer data. Several customers, including Ticketmaster, were affected, and Mandiant confirmed significant data theft and attacks aimed at extortion. Lawsuits were subsequently brought against Snowflake, AT&T and Ticketmaster.
Related reports: 51 · last report →
Also affected: 3Grand Traverse County network hit by ransomware
Impact: County network affected
Grand Traverse County's network was hit by a ransomware attack. The county confirmed that its network had been affected by ransomware.
Read on 9and10News.com ↗
Also affected: 1- City of Traverse CityTraverse City hit by ransomware on network shared with countyCity employees' access to the internet and some programs was restricted, and in-person payments at the city's treasury department were temporarily suspended. The extent of financial losses and whether information had been exposed were unconfirmed.
Key incidents in other countries
NHS ransomware attack disrupts treatment and exposes patient data
5.4mImpact: 5.4 million patient records exposed, more than 1,100 operations postponed, and a contribution to a patient's death
A blood testing company serving London hospitals was hit by a ransomware attack, disrupting NHS blood transfusions and operations and exposing patient information. More than 1,100 operations were postponed, approximately 200 of which involved cancer treatment. The NHS confirmed the online publication of stolen data and investigated, and it later emerged that 5.4 million patient records had been exposed and that the attack had contributed to a patient's death.
Related reports: 29 · last report →T-Mobile breach exposed 79 million customer records in 2021
79mImpact: 79 million customer records
A data breach at T-Mobile exposed 79 million customer records in 2021. A US$350 million settlement payout for affected customers was pursued, with reports in 2025 of payment delays and victims receiving payouts. Washington state brought legal action against T-Mobile over the incident, and a court ruled in 2026 that the company had breached Washington's data breach notification law.
Related reports: 14 · last report →Ransomware attack shuts Cleveland City Hall in the US
Impact: Public services paralysed and City Hall closed
In June 2024, the City of Cleveland in the US was hit by a ransomware attack that paralysed public services and shut City Hall. The city worked to restore its systems and conducted a joint investigation with the FBI. The closure stretched into a second week, and City Hall resumed public-facing services at midday on 20 June.
Related reports: 13 · last report →Suspects arrested one after another over Desjardins data leak and fraud
Impact: Massive data leak and related fraud of $9 million
A massive data leak and related fraud occurred at Canadian financial institution Desjardins. In June 2024, Quebec and Laval police arrested suspects in connection with the data theft and a $9 million fraud. Those arrested included the alleged ringleader, and another suspect later handed himself in.
Related reports: 9 · last report →Buster Olney's X account hacked to post false baseball news
Impact: Personal X account hijacked and false information posted
ESPN reporter Buster Olney's X account was hacked and used to post false baseball information. The posts included false claims about player trades, the New York Mets, Shohei Ohtani and COVID-19, as well as profanity.
Related reports: 6 · last report →