Week 28, 2024 security incident report
Hacking and data breach incidents newly reported 2024.07.08 ~ 07.14
Between 8 and 14 July 2024, allegations of a personal data leak at the Dongtan Police Station and its denial were recorded as the only new incident in South Korea, with controversy over whether a leak had occurred taking centre stage. In total there was 1 new incident in South Korea and 33 overseas; by type, 19 hacking/intrusion cases and 15 personal data leaks were recorded. Overseas, the leak of call and text records of more than 100 million AT&T customers stood out in scale, information exposures continued across various industries, including the leak of internal Disney Slack data and of Rite Aid customer information, and the hacking of Doja Cat's X account led to the promotion of a scam token and losses for investors.
By type
- Hacking & intrusion19
- Data breach13
Key incidents in South Korea
Dongtan Police Station denies alleged personal data leak
Allegations of a personal data leak were raised against Dongtan Police Station. The station said the allegations were untrue.
Read on 세계일보 ↗
Key incidents in other countries
AT&T call and text records for over 100 million customers stolen
100mImpact: Call and text records for over 100 million customers
In July 2024, it emerged that hackers had stolen call and text records for over 100 million people, accounting for nearly all of AT&T's mobile customers. Most FirstNet customers were later confirmed to be among those affected, and customers brought a class action. A former US service member connected to the incident received a prison sentence in 2026.
Related reports: 35 · last report →Disney employee's computer hacked, internal Slack data leaked
Impact: Claimed leak of 1.1TB of internal Slack data, exposing confidential financial and strategic information and personal data of some cruise staff
A Disney employee's computer was hacked through malicious AI software, leaking internal Slack conversations and confidential material. The attacker claimed to have leaked 1.1TB of data, which included confidential financial and strategic information and personal data of some cruise staff. Disney launched an investigation, and plans to stop using Slack and switch to Microsoft Teams were later reported. In May 2025, the attacker pleaded guilty.
Related reports: 33 · last report →Rite Aid cyber-attack exposes data of 2.2 million customers
2.2mImpact: Data of 2.2 million customers
US pharmacy chain Rite Aid suffered a cyber-attack in June 2024 that exposed the data of 2.2 million customers. RansomHub claimed to have stolen about 10GB of customer data, whilst the company said medical and financial information and Social Security numbers were not affected. The company later agreed a $6.8 million settlement in a class action over the data breach.
Related reports: 13 · last report →Heritage Foundation hack puts data including personal information online
Impact: Data including personal information published online
The Heritage Foundation was hacked, and data including personal information was published online. The hackers claimed to have hacked the foundation's files in connection with Project 2025.
Related reports: 5 · last report →Doja Cat's X account hacked to promote scam token, causing investor losses
Impact: $1.6 million in investor losses
Rapper Doja Cat's X account was hacked and used to promote a scam token, with investor losses put at $1.6 million. Posts insulting Iggy Azalea and mentioning Nicki Minaj also appeared on the account. Doja Cat said her account had been hacked.
Related reports: 4 · last report →