Week 29, 2024 security incident report
Hacking and data breach incidents newly reported 2024.07.15 ~ 07.21
Between 15 and 21 July 2024, eight new incidents were recorded in South Korea, with the leak of personal data of 1.6 million ClassU members the largest incident by number of people affected. Leaks of personal data of 5,905 Kyungpook National University postgraduate students and of members of the HAS website revealed damage in the education and services sectors, and the compromise of the YouTube accounts of TVING and tvN dramas and Riot Games' ongoing DDoS problems also stood out. By type overall, personal data leaks were the most common at 24, and knock-on damage via Snowflake and MCG Health was also confirmed. Overseas, 32 new incidents were recorded, with the theft of about $230 million in crypto assets from WazirX standing out, and the aftermath of a past leak at Hackney Council and a string of data leaks, claimed leaks and potential harm at various companies followed.
By type
- Data breach22
- Hacking & intrusion10
- Ransomware4
- Phishing & smishing1
Key incidents in South Korea
Personal data of 1.6 million Classu members leaked
1.6mImpact: Personal data of 1.6 million members
Personal data of 1.6 million members of the online course platform Classu was leaked. In April 2025, the Personal Information Protection Commission (PIPC) imposed a fine on Classu over the personal data leak.
Related reports: 6 · last report →Kyungpook National University leaks personal data of 5,905 postgraduate students
5.9kImpact: Personal information of 5,905 postgraduate students, including names, student ID numbers, departments, credits earned, and GPAs
On 15 July 2024, a Kyungpook National University staff member sending a graduation notice email to 118 postgraduate students attached a file containing the personal information of all 5,905 postgraduate students. The leaked items included names, student ID numbers, departments, credits earned, and grade point averages. The university notified students of the leak and formally apologised, and the Personal Information Protection Commission (PIPC) launched an investigation.
Related reports: 6 · last report →TVING and tvN Drama YouTube accounts hacked, then restored
Impact: Compromise of TVING and tvN Drama YouTube accounts and changes to the channels
The YouTube accounts of TVING and tvN Drama were hacked and turned into cryptocurrency-related channels. The TVING channel's name was temporarily changed before being restored. Both channels carried out recovery work, and their full restoration was reported on 21 July.
Related reports: 4 · last report →tvN Drama YouTube channel with 7.11 million subscribers hacked
7.1mImpact: Hacking of a YouTube channel with 7.11 million subscribers and display of a cryptocurrency logo
The tvN Drama YouTube channel, which has 7.11 million subscribers, was hacked. A cryptocurrency logo was displayed on the channel; the specific intrusion method and whether it has been restored have not been confirmed.
Read on 한겨레 ↗Lessons from three Korean card companies' massive data breach revisited
The massive personal data breach at three Korean credit card companies was revisited. The lessons to be drawn from the incident were discussed.
Read on 보안뉴스 ↗Hack of HASS's external web hosting server leaks member data
Impact: Website members' names, phone numbers, email addresses and affiliated organisations
The web hosting server of an external vendor used by HASS, a maker of aesthetic dental prosthetic materials, was hacked in March. As a result, website members' names, phone numbers, email addresses and affiliated organisations were leaked.
Read on 보안뉴스 ↗Korean Bar Association opens investigation into lawyer suspected of leaking Tzuyang's past information
A lawyer representing Tzuyang's ex-boyfriend was suspected of leaking information about Tzuyang's past. The Korean Bar Association opened an ex officio investigation into the lawyer.
Read on 조선일보 ↗
Supply-chain breaches
MCG Health settles data breach class action for $8.8 million
Software company MCG Health suffered a data breach. A class action over the incident was settled for $8.8 million. The date of the incident, the scale of the breach, the cause and the technical response have not been confirmed.
Related reports: 2 · last report →
Key incidents in other countries
WazirX wallet hack leads to theft of $230 million in crypto
Impact: About $230 million in crypto assets
Indian crypto exchange WazirX had about $230 million in crypto assets stolen in a wallet hack on 18 July 2024. The exchange suspended withdrawals and trading and announced a bounty programme to recover the stolen assets. It later unveiled a plan to resume phased withdrawals of 66% of rupee balances, and in October 2025 its restructuring and operations restart plan was approved in Singapore.
Related reports: 11 · last report →Fallout from Hackney Council's 2020 data breach continues
Hackney Council suffered a data breach in 2020. The council responded to the UK Information Commissioner's Office investigation into the cyber-attack in 2024, and was still dealing with problems caused by the incident in January 2025.
Related reports: 3 · last report →Hackers claim Pinterest user data breach
Hackers claimed to have accessed 60 million rows of Pinterest data. It was subsequently suggested that 6 million users may have been affected. Whether a breach actually took place and its scale have not been confirmed.
Related reports: 2 · last report →American Golf possibly affected by personal data breach
It has been suggested that American Golf may be a victim of a recent personal data breach. An investigation into the breach was described, but whether the company was in fact affected, the scale and the response have not been confirmed.
Related reports: 2 →Data breach at La Jolla Group
A data breach occurred at La Jolla Group. The specific date, scale of the damage, cause and response have not been confirmed.
Related reports: 2 · last report →