Week 30, 2024 security incident report
Hacking and data breach incidents newly reported 2024.07.22 ~ 07.28
Between 22 and 28 July 2024, 6 new incidents were recorded in South Korea and 40 overseas, and in South Korea the leak of personal details of the Korea Defence Intelligence Command's agents working on North Korea and overseas, along with Level 2 and 3 classified information, came to the fore most prominently. Hacks of the YouTube channels of celebrities, broadcast programmes and media outlets followed one after another, along with the disclosure of mobile phone hacking damage, a complaint alleging the unauthorised leak of personal data, and a fine imposed on AliExpress over the overseas transfer of South Koreans' personal data. Across all types, personal data leaks were the most common at 34, and knock-on damage from Freudenberg Medical to Compex Legal Services, Inc. was also confirmed. Overseas, incidents included the closure of the Los Angeles Superior Court following a ransomware attack, attacks on hospitals and defence contractors, a leak of Leidos documents and concerns over the exposure of patient information at healthcare providers.
By type
- Data breach33
- Hacking & intrusion6
- Ransomware4
- DDoS1
Key incidents in South Korea
Korea Defense Intelligence Command overseas agents' identities and secrets leaked
Impact: Identities of agents targeting North Korea and overseas, and Level 2 and 3 classified information
In July 2024, it emerged that information on agents targeting North Korea had been leaked from the Korea Defense Intelligence Command's internal network via a military civilian employee's personal laptop. The leaked material included the identities of overseas agents and Level 2 and 3 classified information, and the civilian employee was suspected of leaking files to an ethnic Korean Chinese national. The command said the leak was not caused by hacking and recalled its dispatched personnel. The civilian employee was arrested.
Related reports: 13 · last report →South Korean military investigates signs of leaked list of overseas covert agents
Impact: Signs of a leak of the military's list of overseas covert agents
Signs emerged that a list of the South Korean military's overseas covert agents had been leaked. The possibility that the information was exposed to North Korea and suspicions of hacking were raised, and South Korea's human intelligence agency launched an investigation into the leak.
Related reports: 3 · last report →Wave of hacks hits popular YouTube channels including IVE and MONSTA X
Impact: YouTube channels of celebrities, TV programmes and news media hacked
YouTube channels with millions of subscribers, including those of IVE, MONSTA X and You Quiz on the Block, were hacked. Hacks also continued to hit official celebrity channels and news media channels.
Related reports: 2 · last report →Former Sunny Hill member Kota reveals phone hacking
Kota, formerly of Sunny Hill, said she had been the victim of mobile phone hacking. Kota explained that she has a recording of the perpetrator's voice; the specific scale of the damage and follow-up measures have not been confirmed.
Read on SPOTV NEWS ↗Min Hee-jin files criminal complaint against HYBE executives over unauthorised leak of personal data
Min Hee-jin filed a criminal complaint against HYBE executives over the unauthorised leak of personal data. The type and volume of information leaked and the timing of the leak have not been confirmed.
Read on 한겨레 ↗AliExpress fined for leaking Koreans' personal data overseas
Impact: Personal data of Koreans
AliExpress was fined 2 billion won for leaking Koreans' personal data overseas. The scale and timing of the leak and the specific circumstances have not been confirmed.
Read on 세이프타임즈 ↗
Supply-chain breaches
Litigation investigation into Freudenberg Medical data breach
An investigation with a view to litigation was conducted into the Freudenberg Medical personal data breach. The date of the incident, the scale of the breach, the cause and the response have not been confirmed.
Read on ClassAction.org ↗
Key incidents in other countries
Ransomware attack shuts down Los Angeles Superior Court
Impact: Suspension of court operations and disruption to the jury service portal
The Los Angeles Superior Court suffered a ransomware attack and suspended court operations on 22 July 2024. The jury service portal was also affected. The court said it planned to reopen all courthouses on Tuesday 23 July.
Related reports: 6 →Hackers claim theft of patient data after Acadian Ambulance cyber-attack
Acadian Ambulance Service suffered a cyber-attack in July. A hacker group later claimed to have stolen patient information. The exact date, scale of the damage and response have not been confirmed.
Related reports: 5 · last report →North Korean hacker's ransomware attacks on US hospitals and defence contractor hacks
A North Korean hacker was indicted for attacking US hospitals and healthcare organisations with ransomware and hacking defence contractors. Information on military aircraft and satellite materials was also among the targets. US authorities offered a $10 million reward for the hacker.
Related reports: 5 · last report →Documents leaked from Leidos, IT supplier to US Department of Defense
Impact: Documents leaked
Hackers leaked documents stolen from Leidos, which provides IT services to the US Department of Defense. The specific volume of documents, when they were stolen, and the company's response have not been confirmed.
Related reports: 4 · last report →Michigan Medicine cyber-attack raises concerns over patient data exposure
57kImpact: Possible exposure of health information of about 57,000 patients
Michigan Medicine suffered a cyber-attack that may have exposed patients' health information. Michigan Medicine notified about 57,000 patients.
Related reports: 2 · last report →