Week 40, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.30 ~ 10.06
Between 30 September and 6 October 2024, two new cyber security incidents were recorded in South Korea, with allegations that the information of 730,000 Naver SmartStore sellers had been collected, sold and circulated standing out most in terms of scale. In connection with the Suncheon murder case involving Park Dae-seong, the personal data of the victim and perpetrator and a confidential internal report were also leaked, revealing problems with leaks of both personal data and internal documents. By incident type across South Korea and abroad, personal data breaches were the most common at 34, followed by 14 hacking/intrusion incidents, 2 ransomware incidents and 1 DDoS attack. Overseas, 49 incidents were recorded, with T-Mobile's settlement with US authorities over repeated personal data breaches and China-linked hackers' targeted intrusion into US telecoms companies' wiretap systems drawing attention, while the LEGO website and an actor's Facebook account were also hacked.
By type
- Data breach31
- Hacking & intrusion13
- Ransomware2
- DDoS1
Key incidents in South Korea
Naver Smart Store seller data harvested, sold and allegedly circulated
730kImpact: Alleged leak of information on 730,000 sellers
Providers of automation programmes harvested personal seller information displayed on Naver Smart Store's TalkTalk and sold it to advertising companies. On 26 September 2024, Naver randomised TalkTalk URLs and blocked the exposure of seller information. In June 2025, allegations emerged that information on 730,000 sellers had been leaked and circulated on the dark web, and Naver said the information had been disclosed in accordance with regulations and was not leaked through hacking.
Related reports: 6 · last report →Internal report and personal data leaked in Suncheon Park Dae-sung murder case
Impact: Personal information of the murder victim and perpetrator, and a confidential internal report
A confidential internal report on the Park Dae-sung murder case in Suncheon was leaked online. The report contained the personal information of the victim and the perpetrator and also spread on mum cafés (online parenting communities). The person who leaked the internal report was later identified.
Related reports: 6 · last report →
Key incidents in other countries
T-Mobile settles with US regulators over repeated data breaches
T-Mobile suffered repeated data breaches over several years. On 30 September 2024, T-Mobile agreed to a settlement totalling $31.5 million to resolve related US Federal Communications Commission investigations and allegations, and pledged to improve its cyber security.
Related reports: 9 · last report →China-linked hackers breach US telecoms, target wiretap systems
Impact: Millions of AT&T and Verizon customers affected
Chinese-linked hacking group Salt Typhoon breached US telecoms operators including AT&T, Verizon and Lumen and targeted wiretap systems. Millions of AT&T and Verizon customers were reportedly affected. In December 2024, AT&T and Verizon said their networks were secure following the breach.
Related reports: 8 · last report →LEGO website hacked to promote fake cryptocurrency
The LEGO website was hacked and used to promote a cryptocurrency scam. The attackers promoted a fake LEGO coin, and the specific extent of the damage and the response have not been confirmed.
Related reports: 7 · last report →Actor Tusshar Kapoor's Facebook accounts hacked
Impact: Personal and public Facebook accounts compromised
Actor Tusshar Kapoor's personal and public Facebook accounts were hacked. Kapoor issued an official statement regarding the account hack.
Related reports: 3 →T-Mobile hack exposes customers' personal data
A hack at T-Mobile in the US led to a leak of customers' personal information. It was followed by a fine, a pledge to prevent recurrence, and compensation for affected customers. Compensation of up to 32 million won per affected customer and a total compensation figure of 459 billion won were reported.
Related reports: 3 · last report →