Week 48, 2024 security incident report
Hacking and data breach incidents newly reported 2024.11.25 ~ 12.01
Between 25 November and 1 December 2024, two personal data breaches occurred in South Korea, with the leak of personal data of around 1.3 million members from a Lock&Lock server hack being the largest by number of people affected. At Coupang, the real names and phone numbers of around 135,000 delivery workers and the details of 22,440 customers and recipients were also leaked, highlighting large-scale personal data damage in the retail and household goods sectors. By incident type across South Korea and abroad, personal data breaches and ransomware each numbered 9, with hacking/intrusion at 7. Overseas, among 23 new incidents, knock-on damage spread from Blue Yonder to Starbucks, Morrisons and Waterstones and from Starbucks to Sainsbury's, and ransomware disrupted companies' payroll and internal operations as well as local authorities' public services.
By type
- Data breach9
- Ransomware8
- Hacking & intrusion7
Key incidents in South Korea
Lock&Lock server hack leaks personal data of 1.3 million members
1.3mImpact: Personal data of about 1.3 million members
Lock&Lock was hacked by an outside party, leaking the personal data of about 1.3 million members. The company said the leaked items included user IDs, encrypted passwords, names, addresses, mobile phone numbers, email addresses and CI (connecting information), and that additional items could be included depending on the information users had entered. The Personal Information Protection Commission (PIPC) imposed a fine of 503 million won on Lock&Lock.
Related reports: 5 · last report →Data of about 135,000 Coupang couriers and 22,440 customers leaked
135kImpact: Real names and phone numbers of about 135,000 couriers and information on 22,440 orderers and recipients
The real names and phone numbers of about 135,000 Coupang Eats couriers were exposed, and information on 22,440 orderers and recipients was leaked through the seller system. The Personal Information Protection Commission (PIPC) imposed fines and penalties totalling about 1.6 billion won for violations including failures in safeguards and breach notification obligations. A class action lawsuit was later filed over the leak of Coupang Eats couriers' personal data.
Related reports: 4 · last report →
Supply-chain breaches
Blue Yonder ransomware attack disrupts retailers' logistics and workforce management
Impact: Operational disruption including Starbucks workforce management and UK retailers' logistics and warehouse systems
Blue Yonder discovered a ransomware attack on 21 November 2024, causing cascading disruption to customer operations. Retailers' operations were affected, including employee hours and rota management at Starbucks and fresh food warehouse management at Morrisons. When the ransomware group Termite claimed the attack and the theft of 680GB of data, Blue Yonder investigated the claims.
Related reports: 14 · last report →
Also affected: 2- MorrisonsBlue Yonder cyber-attack hits Morrisons supply chainSupply chain operations affected
- Waterstones Booksellers LimitedBlue Yonder ransomware attack hits Waterstones warehouse systemsWarehouse system operations affected
Starbucks payroll and scheduling disrupted by ransomware attack on supplier
Impact: Disruption to employee payroll processing and rota management
A ransomware attack on an external software supplier used by Starbucks disrupted employee payroll and rota management. Starbucks recorded employees' working hours on paper and processed payroll manually. Sainsbury's also suffered operational disruption from the same attack.
Related reports: 16 · last report →
Also affected: 1- J Sainsbury plcJ Sainsbury plc operations disrupted in wake of ransomware attackOperational disruption
Key incidents in other countries
Starbucks payroll and scheduling disrupted by ransomware attack on supplier
Impact: Disruption to employee payroll processing and rota management
A ransomware attack on an external software supplier used by Starbucks disrupted employee payroll and rota management. Starbucks recorded employees' working hours on paper and processed payroll manually. Sainsbury's also suffered operational disruption from the same attack.
Related reports: 16 · last report →Stoli's US businesses file for bankruptcy protection after ransomware disrupts operations
Impact: Data breach and ERP paralysis disrupting internal operations such as accounting
Stoli's US businesses suffered operational disruption from a ransomware attack and data breach in August. With the ERP system paralysed, internal work such as accounting had to be done manually. The cyber-attack and financial difficulties contributed to the bankruptcy protection filing.
Related reports: 6 · last report →Ransomware shuts Hoboken city hall and services
Impact: City hall closed and online and public services disrupted
The US city of Hoboken was hit by a ransomware attack in November 2024, closing city hall and suspending online services. In early December, the city said recovery was under way. ThreeAM, reportedly linked to Conti, claimed responsibility for the attack.
Related reports: 5 · last report →Health data of about 600 Minneapolis VA patients stolen
600Impact: Health information of about 600 veterans
Health information of about 600 Minnesota veterans who used the Minneapolis VA health care facility was stolen in a cyber-attack. The US Department of Veterans Affairs disclosed the incident. The date of the attack and the specific response measures have not been confirmed.
Related reports: 2 →HDFC Life customer data stolen, attackers demand money
Impact: Customer data
HDFC Life Insurance was hit by a cyber-attack in which customer data was stolen, and the attackers demanded money. In March 2025, the company said it had resolved the data theft issue and strengthened its security procedures.
Related reports: 2 · last report →