Week 37, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.09 ~ 09.15
Between 9 and 15 September 2024, two new cyber security incidents were confirmed in South Korea, with the leak of personal data of around 3.06 million members and non-members in a web shell attack on Modetour Network standing out most in terms of both scale and coverage. At the Korea Vocational Competency Education Institute, hacking also leaked four categories of personal data including names and phone numbers, as personal data damage occurred in the travel and education sectors. By incident type overall, personal data breaches were the most common at 29, followed by 10 hacking/intrusion incidents, 5 ransomware incidents and 1 DDoS attack, and knock-on damage from Compass Group to Bennett Currie was also seen. Overseas, 43 new incidents were recorded, with data leaks via AT&T's external cloud provider and a third-party drive at Fortinet, as well as large-scale exposure of personal and card data in the payments sector, standing out.
By type
- Data breach29
- Hacking & intrusion10
- Ransomware4
- DDoS1
Key incidents in South Korea
Modetour Network web shell attack leaks personal data of about 3.06 million people
3.1mImpact: Personal information of about 3.06 million members and non-members
In June 2024, Modetour Network's website was hit by a web shell attack exploiting a file upload vulnerability, and personal information of about 3.06 million members and non-members was stolen. The leaked data included names, dates of birth, mobile phone numbers, CI and DI values, and the company announced the incident in September despite becoming aware of it that June. The company apologised and asked users to change their passwords, and a sanction by the Personal Information Protection Commission and a damages ruling followed.
Related reports: 25 · last report →Hack at Korea Vocational Competency Education Institute leaks four types of personal data
Impact: Four items of personal information, including names and phone numbers
Personal information was leaked in a hack at the Korea Vocational Competency Education Institute. The leaked data comprised four items, including names and phone numbers.
Read on 보안뉴스 ↗
Supply-chain breaches
Australia's Compass Group confirms Medusa ransomware attack
Sydney-based Compass Group in Australia confirmed a Medusa ransomware attack. It later confirmed a second hack, and the specific scale of the damage and recovery measures have not been confirmed.
Related reports: 2 · last report →
Key incidents in other countries
LVHN patient personal data breach
Impact: Patients' personal information
A breach of patients' personal information took place at LVHN. A $65 million settlement was reached in connection with the incident.
Related reports: 12 · last report →AT&T customer billing data leaked from third-party cloud supplier
Impact: Customer billing information
In 2023, customer billing information that AT&T had provided to a third-party supplier was leaked through a breach of that supplier's cloud. In September 2024, AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into the incident and pledged to improve security.
Related reports: 11 · last report →Fortinet customer data leaked in third-party drive breach
Impact: Limited number of customer files leaked; attacker claims 440GB stolen
A hacker accessed a Fortinet third-party drive, leaking information on customers in the Asia-Pacific region. Fortinet confirmed access to a limited number of customer files, while the attacker claimed to have stolen 440GB of files.
Related reports: 8 · last report →Class actions filed over suspected Ally Bank personal data leak
It was alleged that consumers' personal information may have been exposed in a data breach at Ally Bank in April. Two class actions were filed in connection with the incident, alleging that the company's negligence led to the breach. The actual scale of the leak has not been confirmed.
Related reports: 6 · last report →Payment processor data breach exposes card data of about 1.7 million people
1.7mImpact: Credit card information of about 1.7 million people
A data breach at a payment processor exposed the credit card information of about 1.7 million people. The company said the breach may have affected about 1.7 million people.
Related reports: 5 · last report →