Week 31, 2024 security incident report

Jeonbuk National University integrated information system hacked, personal data leaked

322.1kImpact: 322,130 personal data records

On 28 July 2024, Jeonbuk National University's integrated information system OASIS was hacked, leaking the names, resident registration numbers, contact details and academic records of students, graduates and lifelong education centre members, among others. The university detected the attack on 29 July, blocked the access path and patched the vulnerability, and later strengthened two-factor authentication. The investigation found vulnerabilities such as in the password recovery function and poor monitoring at night and at weekends, and the university was fined about 620 million won.

National university hack leaks personal data of 320,000

320kImpact: Personal information of 320,000 people

A national university was hacked, leaking the personal information of 320,000 people. The name of the affected university and its specific response have not been confirmed.

IP camera hacking leaks 180 private videos

180Impact: 180 private videos

Hacking of IP cameras led to the unauthorised leak of 180 private videos. The specific victims and the date of the incident have not been confirmed.

Phishing emails impersonating CJ CheilJedang sent at random via Gmail

Phishing emails impersonating CJ CheilJedang were sent at random through Gmail accounts. People were urged to be cautious about the impersonation emails; whether any actual damage occurred and its extent have not been confirmed.

Lessons from the Interpark personal data breach

The Interpark personal data breach was revisited and its lessons discussed. The specific date of the incident, the extent of the damage, how the data was leaked, and the response have not been confirmed.

Personal data leaked from Balmers Korean Medicine Clinic recirculated on Telegram

Personal information from Balmers Korean Medicine Clinic was leaked and posted on a black market, then recirculated via Telegram. When the leak occurred, its scale, its cause, and the response have not been confirmed.

Fake notifications ask some Baemin shop owners to submit customer data

Impact: Fake notification messages sent to some shop owners

Fake notification messages demanding the submission of customer information were sent to some Baemin shop owners. Suspicions of a server hack were raised, but whether a hack occurred, its scale, and the response have not been confirmed.

Smishing texts impersonating TMON and WeMakePrice refunds and deliveries spread

Smishing text messages impersonating TMON and WeMakePrice refunds and product deliveries were detected. The messages linked to pages impersonating the Korea Consumer Agency and Naver, luring recipients into installing malicious apps or entering account credentials. The actual extent of financial losses has not been confirmed.

Ransomware attack on US city of Columbus steals data of 500,000 people

500kImpact: Personal and financial information of 500,000 people

The US city of Columbus was hit by a ransomware attack in July 2024 that stole personal and financial information of 500,000 people. Rhysida, which claimed the attack, put the stolen data up for auction and then published it on the dark web. The city initially denied any personal data leak but later acknowledged that residents' information had been exposed and notified those affected.

OneBlood ransomware attack disrupts blood supply, donor data stolen

Impact: Disruption of blood collection, testing and supply, and theft of donors' names and Social Security numbers

US blood supplier OneBlood suffered virtual machine encryption and system outages in a ransomware attack in July 2024. The switch to manual processes delayed blood collection, testing and distribution and sharply reduced operational capacity. A subsequent investigation confirmed that the attackers had accessed the network and copied files from 14 to 29 July, and that donors' names and Social Security numbers had also been stolen.

Ransomware attack on US city government raises fears of personal data leak

A US city government was hit by a ransomware attack, and the hacker group that claimed responsibility demanded a ransom of around $2 million. Concerns were then raised that city employees' personal information may have been hacked, and criticism followed over the large-scale data leak and the city government's response.

Voting machine data leaked in Mesa County, US

Impact: Voting machine data

Voting machine data was leaked in Mesa County, Colorado, in the US. Election official Tina Peters stood trial in connection with the case and was found guilty on most charges in August 2024. A programmer whose identity had been stolen testified at the trial that he had feared being framed by the government.

DDoS attack disrupts major Microsoft services for about 9 hours

Impact: About nine hours of outages and instability in Azure, Microsoft 365 and other services

On 30 July, a DDoS attack caused multiple Microsoft services, including Azure and Microsoft 365, to go down or become unstable for about nine hours. Outlook and the Starbucks app, among others, were also affected. Microsoft explained that an error in the implementation of its defences amplified the impact of the attack.