Week 36, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.02 ~ 09.08
In South Korea, the leak of 22 categories of personal data on around 80,000 Ewha Womans University graduates, along with some parents' details, received the most coverage, and the leak of 180,000 litigation files totalling 1.59 TB from the law firm Logos also highlighted large-scale data leaks. Hacks of high-profile public-facing accounts came in quick succession, including the YouTube channels of an entertainment agency and its singer and T1's X account, while Curve and Kyungchang Industrial saw ransomware damage disclosed and suspected leaks of internal data. Across all incident types in South Korea and abroad, 20 personal data breaches and 14 hacking/intrusion incidents made up the majority. Overseas, reports included the Transport for London hack affecting around 10 million people, a leak of Avis customer data, claims of a large-scale data leak at VK, and a possible MOVEit-related leak of Medicare beneficiaries' information.
By type
- Data breach17
- Hacking & intrusion12
- Ransomware5
- Phishing & smishing1
Key incidents in South Korea
Personal data of around 80,000 Ewha Womans University alumnae leaked
80kImpact: 22 items of personal information of around 80,000 graduates, plus addresses and contact details of some guardians
Ewha Womans University's integrated information system was hacked via an overseas IP address, leaking 22 items of personal information of around 80,000 graduates who entered between the 1982 and 2002 academic years. The leaked information included resident registration numbers and addresses, and the addresses and contact details of some graduates' guardians were also leaked. The Seoul Metropolitan Police Agency's cyber investigation unit launched a preliminary inquiry.
Related reports: 9 · last report →Logos Law LLC hack leaks 180,000 litigation files
180kImpact: 180,000 litigation files; 1.59 TB of data
Logos Law LLC was hacked, leaking 180,000 client litigation files totalling 1.59 TB. In September 2024, a hacker claimed to be selling Logos data on the dark web for 5 BTC. The Personal Information Protection Commission (PIPC) imposed a fine of KRW 523 million on Logos over the personal data leak.
Related reports: 7 · last report →Big Planet Made Entertainment's YouTube channel hacked
Big Planet Made Entertainment's YouTube channel was hacked. The specific scale of the damage, the attack method and the response measures have not been confirmed.
Related reports: 3 · last report →Ransomware gang El Dorado names South Korean company Curve as victim
Ransomware gang El Dorado listed South Korean company Curve as one of 17 victim companies. The specific scale of the damage, when the attack occurred and the company's response have not been confirmed.
Read on 보안뉴스 ↗Personal data leaks of celebrities including Mingyu and RM
Issues arose over leaks of personal information of celebrities including Mingyu and RM. L'Occitane was mentioned in connection with the Mingyu case, and the specific circumstances of the leaks and the response have not been confirmed.
Read on 스포츠월드 ↗Kyung Chang Industrial ransomware attack believed to have leaked internal data
Impact: Suspected leak of shared data and files from some employees' PCs; 1.8TB according to the attackers' claim
Car parts maker Kyung Chang Industrial was hacked by a ransomware group, and shared data and files from some employees' PCs are believed to have been leaked. The attackers claimed the stolen data amounted to 1.8TB. Kyung Chang Industrial did not give a specific response to press enquiries.
Read on 더벨 ↗YouTube channels of Lee Seung-gi and Taemin hacked
Impact: Hacking of Lee Seung-gi's and Taemin's YouTube channels
The YouTube channels of Lee Seung-gi and Taemin were hacked. It was reported that Elon Musk was appearing on the affected channels.
Read on YTN ↗T1 X account hacked; warning issued over suspicious coin-launch URLs
T1's X account was hacked, prompting warnings not to click suspicious URLs related to a coin launch. The specific scale of the damage and the response measures have not been confirmed.
Read on 뉴스1 ↗
Key incidents in other countries
Transport for London hack affects around 10 million people
10mImpact: Around 10 million people affected; damage of around 53 billion won
Transport for London was hit by a cyber-attack in 2024 that affected around 10 million people. Following the attack, staff systems were disrupted and the data feed supplied to travel apps was suspended. The hackers involved were jailed in July 2026, and the damage was put at around 53 billion won.
Related reports: 15 · last report →Avis hack exposes data of about 300,000 customers
300kImpact: Personal information of about 300,000 customers
Car hire company Avis was hit by a cyber-attack, and customers' personal information was stolen. The number of people affected was reported to be about 300,000. The company disclosed the breach, and a legal investigation into the incident was also carried out.
Related reports: 11 · last report →Hacker claims leak of data on 390 million users of Russian social network VK
390mImpact: Claimed leak of data on 390 million users
A hacker claimed to have published data on 390 million users of Russian social media platform VK. VK denied claims that a hack had occurred.
Related reports: 6 · last report →US Centers for Medicare & Medicaid Services notifies around 1 million people of breach
1mImpact: Around 1 million people notified
The US Centers for Medicare & Medicaid Services notified around 1 million people in connection with a cyber breach. When the breach occurred and the attack method have not been confirmed.
Related reports: 6 · last report →Lara and Tiffany Trump's X accounts hacked to promote crypto scams
Impact: Lara Trump's and Tiffany Trump's X accounts hijacked and misused to promote scams
The X accounts of Lara Trump and Tiffany Trump were hacked. The hijacked accounts were used to promote fake cryptocurrency ventures and scams.
Related reports: 4 · last report →