Week 49, 2024 security incident report
Hacking and data breach incidents newly reported 2024.12.02 ~ 12.08
Between 2 and 8 December 2024, five new incidents were recorded in South Korea, with the leak of surveying information by employees of the Korea Land and Geospatial InformatiX Corporation (LX), covered in two articles, attracting the most attention. Data leaks at public bodies continued with a leak at the National Information Society Agency (NIA), and the hacking of Halfclub escalated into a leak of vendors' personal data and controversy over the company's explanation regarding a partner. Amid the hacking of Tablo's social media account, ransomware was the most common incident type across South Korea and abroad at 9, followed by 8 hacking/intrusion incidents and 7 personal data breaches. Overseas, the network shutdown and personal data leak caused by a ransomware attack on PIH Health and the leak of information on 90,000 people at the Port of Seattle stood out, while in White Lake Township, hacking delayed projects worth more than $45 million.
By type
- Hacking & intrusion8
- Ransomware8
- Data breach7
- Malware1
Key incidents in South Korea
Survey data leaked by employees of Korea Land and Geospatial Informatix Corporation
Impact: Leak of survey data
Survey data was leaked by employees of the Korea Land and Geospatial Informatix Corporation. The corporation imposed severe disciplinary measures, including dismissal, on 45 employees involved.
Related reports: 2 →LF's Halfclub hacked; explanation pointing to affiliate sparks controversy
LF's Halfclub was hacked. An explanation of the incident that hinted at a problem with an affiliate sparked controversy.
Read on 뉴스저널리즘 ↗Epik High's Tablo has social media account hacked
Impact: Tablo's social media account hacked
Epik High member Tablo had his social media account hacked. Tablo described it as workplace harassment.
Read on 조선일보 ↗Data leak at National Information Society Agency
A data leak occurred at the National Information Society Agency. The type and scale of the leaked information, the date and the response measures have not been specifically confirmed.
Read on 시사저널 ↗Tricycle's Halfclub hack leaks vendors' personal data
Impact: Vendors' personal information leaked
Tricycle's Halfclub online shopping site was hacked. As a result, vendors' personal information was leaked.
Read on 보안뉴스 ↗
Key incidents in other countries
PIH Health ransomware attack shuts down network and leaks personal data
Impact: Leak of personal information including Social Security numbers and health information; network shutdown
Following a ransomware attack on 1 December 2024, PIH Health shut down its network and switched to paper records. The attackers claimed to have stolen data on 17 million patients and threatened to publish personal information, photos and test results, but the scale was not confirmed. In March 2026, PIH Health disclosed a personal data breach that exposed Social Security numbers, health information and other data.
Related reports: 7 · last report →Brain Cipher claims Deloitte data theft; Deloitte denies
The ransomware group Brain Cipher claimed to have stolen data from Deloitte. In response, Deloitte denied claims that its systems had been hacked.
Related reports: 3 · last report →Hack delays over $45 million in projects at White Lake Township
Impact: Delay of projects worth more than $45 million
A hack delayed projects worth more than $45 million in White Lake Township in the US. The date of the attack, the specific method and response measures have not been confirmed.
Related reports: 3 · last report →Ransomware attack on Costa Rica's state-owned energy company
Costa Rica's state-owned energy company was hit by a ransomware attack and asked US experts for assistance. The response to this cyber-attack on the refinery operator marked the first deployment of a new US response programme.
Related reports: 2 · last report →American Associated Pharmacies hit by ransomware
American Associated Pharmacies was hit by a ransomware attack. The specific extent of the damage and the response measures have not been confirmed.
Related reports: 2 · last report →