Week 39, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.23 ~ 09.29
Between 23 and 29 September, the most prominent incident in South Korea was the distribution of private videos from shops and medical facilities on a Chinese website, where around 500 videos were found in a category for South Koreans; the exact scale of the damage is under investigation. A personal data leak also occurred on a development server of the Korean National Tuberculosis Association's cyber training centre, meaning South Korea's two new incidents were concentrated on the distribution of private videos and personal data leaks. Across all incident types in South Korea and abroad, there were 19 hacking/intrusion incidents, 13 personal data breaches and 5 ransomware incidents, making hacking/intrusion the most common. Overseas, the leak of 31 million account records and service outage at the Internet Archive stood out, while MoneyGram also suffered a leak of customers' personal and transaction data along with a suspension of money transfers and fund collection.
By type
- Hacking & intrusion16
- Data breach12
- Ransomware5
Key incidents in South Korea
Private videos from South Korean shops and medical facilities spread on Chinese site
Impact: About 500 videos in a Korean category on a Chinese site; exact scale of damage under investigation
Private videos filmed at places in South Korea such as waxing salons and obstetrics and gynaecology clinics were spread on a Chinese website. Of about 800 videos on the site, about 500 were in a Korean category, and police investigated whether IP cameras had been hacked and the exact scale of the damage. The Korea Communications Standards Commission (KCSC) issued correction requests and blocked access to 260 related videos, and the Personal Information Protection Commission (PIPC) began preparing institutional countermeasures.
Related reports: 10 · last report →Personal data leaked from Korean National Tuberculosis Association e-learning development server
Personal information was leaked from the development server of the Korean National Tuberculosis Association's cyber training centre. The scale of the leak, the date and the response measures have not been disclosed.
Read on 보안뉴스 ↗
Key incidents in other countries
Internet Archive hack exposes data of 31 million accounts
31mImpact: Leak of information on 31 million accounts and service outage
The Internet Archive was hacked in October 2024, leaking the information of 31 million accounts. A DDoS attack also took the service down, and it was restored in read-only mode on 14 October. A second breach occurred the same month, and its Zendesk platform was also targeted.
Related reports: 52 · last report →MoneyGram cyber-attack leaks customer data and halts transfers
Impact: Leak of customer personal and transaction information; suspension of money transfers and receipts
MoneyGram was hit by a cyber-attack in September 2024 that disrupted its money transfer services for several days. As it shut down some systems to respond to the incident, website access and customers' ability to send and receive money were suspended. In October it said customers' personal and transaction information had been stolen, and the leaked information included Social Security numbers and bank account details.
Related reports: 16 · last report →China-linked hackers allegedly breach US telecoms and access wiretap systems
Impact: Breach of multiple US telecoms operators
It emerged in September 2024 that the China-linked hacking group Salt Typhoon had breached US internet and telecoms providers. Authorities launched an investigation into suspected intrusions into US government wiretap systems and intelligence gathering. In October, phones used by Trump and Vance were also identified as targets, and the US Department of Homeland Security decided to investigate the related telecoms hacks.
Related reports: 13 · last report →Dutch police hack exposes officers' contact details
Impact: Personal information, including contact details, of nearly all police officers
The Dutch police were hit by a cyber-attack that exposed personal information, including contact details, of nearly all police officers. Dutch authorities judged that a state-backed attack was highly likely. Intelligence services later linked the Russian hacking group Laundry Bear to the incident and said the group had been seeking Ukrainian military intelligence.
Related reports: 9 · last report →Ranveer Allahbadia's YouTube channels hacked, then restored
Impact: YouTube channels and videos deleted
YouTuber Ranveer Allahbadia's YouTube channels, including BeerBiceps, were hacked and videos were deleted. Allahbadia went public about the damage and his concerns about continuing his work, and the channels were restored two days after the hack.
Related reports: 8 · last report →