Week 41, 2024 security incident report

KHNP contractor hack leaks about 720,000 files including nuclear plant data

Impact: About 720,000 files including nuclear power plant data, of which about 110,000 were KHNP technology-related materials

A KHNP contractor was hacked twice, in September 2020 and June 2024, and about 720,000 files including nuclear power plant data were stolen. The attackers exploited a vulnerability in a centralised document management system to obtain administrator passwords and were believed to be linked to North Korea. About 110,000 of the leaked files were found to be KHNP technology-related materials.

No charges for flat manager who disclosed households storing bicycles

A flat management office head was accused of leaking personal information after disclosing households that had stored bicycles. Authorities concluded there were no grounds for the charge against the manager.

Supply chain attack on South Korean gaming industry plants malicious code in official security modules

Impact: Tampering with security modules of officially distributed games and distribution of remote-control malware to systems where they were installed

In April-May 2024, a supply chain attack targeted South Korean game security vendors and game companies, inserting malicious routines into the security modules of officially distributed games. The attackers used stolen valid certificates to sign backdoors and hacking tools, and remote-control malware was distributed to systems where the modules were installed. The names of the affected companies, the extent of the damage and the response have not been confirmed.

Controversy over security rating of university that leaked tens of thousands of students' data

Impact: Personal information of tens of thousands of students

Questions were raised over a university that leaked the personal information of tens of thousands of students receiving a pass mark in the government's university information security assessment. The name of the university, the timing of the leak and the response have not been confirmed.

Telegram 'acquaintance humiliation rooms' and doxxing cause secondary victimisation

Impact: Leak of victims' personal details and secondary victimisation

A case occurred in which 'acquaintance humiliation rooms' were run on Telegram and victims' personal details were leaked, causing secondary victimisation. The number of victims, when it took place and the investigation or victim support response have not been confirmed.

American Water cyber-attack forces online services offline

Impact: Shutdown of online services and temporary pause in customer billing

American Water was hit by a cyber-attack that led it to shut down its online services and temporarily pause customer billing. The company determined that its water and wastewater facilities were not affected. On 11 October 2024, it began bringing the systems it had shut down back online.

Casio ransomware attack leaks personal data of 8,500 people

8.5kImpact: Personal information of 8,500 people leaked; new product launch and results publication delayed

Casio was hit by a ransomware attack in October 2024 that leaked information on employees, customers and business partners. The attack delayed the launch of new G-SHOCK watches and the publication of financial results. The number of people whose personal information was leaked, confirmed in January 2025, was 8,500, and Casio notified employees and customers of the leak.

Game Freak hack leaks employee data and internal game materials

Impact: Employee information and 1TB of internal materials including source code and draft images

Pokémon developer Game Freak was hacked, leaking employee information and internal game materials. The leaked materials included source code and draft images, with the total size put at 1TB. The company confirmed the hack and apologised.

Fidelity Investments breach exposes personal data of about 77,000 customers

77kImpact: Personal information of about 77,000 customers

The personal information of about 77,000 Fidelity Investments customers was exposed. The company offered free identity monitoring services after the breach, and an investigation for a related lawsuit was carried out.

Hacked robot hoovers hurl slurs and chase pets in several US cities

Impact: Slurs and surveillance targeting users in several US cities, and pets chased

It emerged in October 2024 that hackers had taken control of robot vacuum cleaners in several US cities. The hacked devices shouted racial slurs at their owners or chased pets. There were also signs that the robot vacuum cleaners had been used to spy on their owners.