Week 42, 2024 security incident report
Hacking and data breach incidents newly reported 2024.10.14 ~ 10.20
Between 14 and 20 October 2024, four new cyber security incidents were recorded in South Korea, and among those with a stated scale of damage, the leak of 267 email addresses through a bulk email sent by Remember stood out. An incident in which a resident registration household register was handed to a security guard, leaking the personal data of 122 households, and a personal data leak at a golf booking app also occurred, making personal data exposure the main trend in South Korea. Cyber-attack damage suffered by victims of Instagram account deactivations was also reported. Overseas, 29 new incidents were recorded, with the online release of 2.9 GB of data stolen from Cisco attracting attention, and cases affecting service operations and safety also emerged, including restrictions on library services and risks to human life from attacks on hospitals.
By type
- Hacking & intrusion13
- Data breach10
- Ransomware7
- DDoS1
Key incidents in South Korea
Remember bulk email exposes 267 people's email addresses
267Impact: Email addresses of 267 people
Business card app Remember leaked the email addresses of 267 people while sending a bulk email. The leak was reported on 17 October 2024.
Related reports: 2 →Resident registration household list handed to security guard, exposing data of 122 households
Impact: Personal information of 122 households
A resident registration household list was handed over to a security guard, exposing the personal information of 122 households. Who handed over the list, when the incident took place and the follow-up response have not been confirmed.
Read on KBS 뉴스 ↗Victims of Instagram account deactivations also hit by cyber-attacks
People whose Instagram accounts were deactivated were also hit by cyber-attacks. The timing and methods of the attacks, the scale of the damage and the response have not been confirmed.
Read on 더에이아이 ↗Personal data leaked from golf booking app
Personal data was leaked from a golf booking app. The app's name, the scale of the damage, the timing of the leak and the response have not been confirmed.
Read on 서울경제 ↗
Key incidents in other countries
Cisco cloud data stolen and published online
Impact: 2.9GB of data published online; attackers claim 4.5TB stolen in total
Allegations of a Cisco data breach surfaced in October 2024, and in December IntelBroker published online 2.9GB of Cisco-related data stolen from a cloud instance. The attackers claimed the total amount stolen was 4.5TB. Cisco said the additional leak in December and material published by a ransomware gang in February 2025 were linked to the earlier hack.
Related reports: 9 · last report →Calgary Public Library restricts services after cyber-attack
Impact: Library services restricted
In October 2024, Calgary Public Library was hit by a cyber-attack and restricted its services. The library investigated the attack whilst working to reopen its branches. A possible ransomware attack was later suggested.
Related reports: 6 · last report →Anonymous Sudan cyber-attacks on hospitals and charges against its operators
Impact: Lives endangered by attacks on hospitals
Anonymous Sudan was accused of endangering lives by carrying out cyber-attacks on targets including hospitals. In October 2024, two Sudanese brothers were charged with running an attack-for-hire operation. Members charged in connection with cyber-attacks in Alabama could face life in prison.
Related reports: 3 · last report →Boston Children's Health Physicians confirms September data breach
Impact: Data breach
Boston Children's Health Physicians confirmed a data breach that occurred in September. The BianLian ransomware gang claimed to have attacked the organisation.
Related reports: 3 · last report →Victims sue Georgetown University over sensitive data leak
Sensitive information was leaked at Georgetown University. A Virginia prosecutor who is an alumnus of the university filed a lawsuit against it over the leak. A law professor also filed suit, and questions about the leak were raised up to November 2024.
Related reports: 3 · last report →