Week 44, 2024 security incident report
Hacking and data breach incidents newly reported 2024.10.28 ~ 11.03
Between 28 October and 3 November 2024, three new incidents were confirmed in South Korea, and the leak of Hyundai Motor and Kia's new car plans through a breach at a partner company revealed the risk of corporate information leaking via partners. The hacking of Instagram accounts belonging to celebrities including actress Song Seon-mi and the leak of personal data of 168 pupils after a Gongju secondary school staff member mistakenly posted a file also occurred, showing account compromises and workplace errors side by side. Of 44 new incidents overall, personal data breaches were the most common at 25, followed by 15 hacking/intrusion incidents and 4 ransomware incidents. Overseas, the leak of information on 19 million people at French telecoms operator Free stood out in scale, while cancelled classes at SETU's Waterford campus and knock-on damage from MML Investors Services to MML Investors Services LLC and Seneca Financial Advisors LLC were also confirmed.
By type
- Data breach25
- Hacking & intrusion15
- Ransomware4
Key incidents in South Korea
Actress Song Sun-mi and other celebrities hit by Instagram hacks
Celebrities including actress Song Sun-mi and National Assembly members had their Instagram accounts hacked. Song Sun-mi disclosed the hack and urged people to be wary of further harm.
Related reports: 3 →Gongju high school staff member's mistaken file post exposes data of 168 pupils
168Impact: Names, contact details, health notes and expense support eligibility information of 168 pupils, among other data
A staff member at a high school in Gongju, South Chungcheong Province, mistakenly posted an operations plan file to a group chat for a field trip, exposing the personal information of 168 pupils. The exposed information included names, contact details, health notes and information on who was eligible for expense support. The file remained posted for about an hour, and the school belatedly apologised to parents.
Read on 연합뉴스 ↗Supplier breach leaks Hyundai and Kia new car plans
Impact: New vehicle plans of Hyundai Motor and Kia
A supplier was breached, leaking new vehicle plans of Hyundai Motor and Kia. The specific scale of the leak, the attack method and the response have not been confirmed.
Read on MBC 뉴스 ↗
Supply-chain breaches
National Financial Services breach affects MML
A data breach at National Financial Services affected MML Investors Services, a MassMutual subsidiary. National Financial Services announced the breach on 22 October 2024, after which a class action review of the MML Investors Services data breach began.
Related reports: 2 · last report →
Key incidents in other countries
Hack of French telecoms operator Free leaks data of 19 million people
19mImpact: Leak of information on 19 million people
French telecoms operator Free suffered a data breach in a cyber-attack. The hacker put customer data up for auction, and Free confirmed the breach in October 2024. The number of people affected was reported to be 19 million.
Related reports: 4 · last report →Cyber-attack cancels classes at SETU's Waterford campus
Impact: Cancellation of Monday classes at the Waterford campus
Monday classes were cancelled after SETU's Waterford campus was hit by a cyber-attack. The effects of the attack continued on 6 November, and the specific attack method and whether any data was leaked have not been confirmed.
Related reports: 4 · last report →Personal data breach at Entertainment Partners
A personal data breach occurred at Entertainment Partners. A US$9.5 million settlement was reached in a class action over the incident.
Related reports: 3 · last report →Center for Urban Community Services cyber-attack affects 38,000
38kImpact: Leak of information on 38,000 people
The Center for Urban Community Services was hit by a cyber-attack that resulted in a data breach affecting 38,000 people. The centre notified the victims of the data breach in October 2024.
Related reports: 2 →Data breach at seafood wholesaler True World Group
A data breach occurred at seafood wholesaler True World Group. A law firm is investigating the breach.
Related reports: 2 · last report →