Week 7, 2025 security incident report

Actress Son Na-eun's phone hacked, followed by money demands and threats to family

Impact: Personal mobile phone hacked, money paid, and threats against her and her family

Actress Son Na-eun's personal mobile phone was hacked, and the perpetrator demanded money and made threats. Even after Son complied with one demand for money, further demands followed and her family was contacted as well. Her agency YG Entertainment said it would take legal action, and police launched a formal investigation.

SECTA9INE fined over Happy Point customer data leak

10kImpact: Personal information of about 10,000 people

A hack at SECTA9INE, the operator of Happy Point, leaked the personal information of about 10,000 people. The Personal Information Protection Commission (PIPC) imposed a fine of about 1.47 billion won over inadequate security measures despite repeated hacks.

Customers' cards secretly cloned at convenience shop, 119 personal data records leaked

119Impact: 119 personal data records

Customers' cards were secretly cloned at a convenience shop, leaking 119 personal data records. The date of the incident and the follow-up response have not been confirmed.

Ransomware attack claimed on South Korean parts maker, data leak confirmed

Impact: Leak of some information from a specific department of an affiliate; attackers released more than 12 GB of data

The Lynx ransomware gang claimed it attacked S, a South Korean manufacturer of household appliance and secondary battery components, and released more than 12 GB of data on 11 February 2025. The company acknowledged that some information from a specific department of an affiliate had been leaked. The company's real name has not been disclosed.

Shinsung Delta Tech hit by ransomware, subsidiary data leaked

Impact: Leak of subsidiary data

Shinsung Delta Tech suffered a ransomware attack, and data from its subsidiary was leaked. The exact timing, the scale of the leak and the company's response have not been confirmed.

NJZ members' parents raise information leak issue over Hanni's visa

The parents of NJZ members claimed that pressure from ADOR and information leaks regarding Hanni's visa issue were serious. The specific scope of the leaked information, how it happened and the follow-up response have not been confirmed.

Daejeon District Court employee who leaked personal data to former judge faces heavy discipline

An employee of the Daejeon District Court leaked personal information to a former judge. The Daejeon District Court imposed heavy disciplinary action on the employee.

Happy Point fined 1.5 billion won after customer data leaked two years running

Customer information was leaked from Happy Point two years running. A fine of 1.5 billion won was imposed, and the specific timing of the leaks and the scale of the damage have not been confirmed.

Hacked Seoul citizen email accounts used in phishing posing as officials

Impact: Hacking of some Seoul citizen email accounts

Some Seoul citizen email accounts were hacked and used to send phishing emails impersonating public officials. The emails, which proposed a virtual meeting about anti-North Korea leaflets, carried attachments with hidden malware. With North Korean hackers suspected, police raided Seoul City Hall and secured the relevant account information.

Kimsuky lures companies into infection with malicious emails posing as business partner replies

A case was detected in which North Korean hacking group Kimsuky sent malicious emails disguised as replies from companies' business partners, infecting recipients with malware. The emails posed as the delivery of a periodic inspection report and a laptop price quote enquiry, and running a PIF file inside an attached archive launched a backdoor along with a legitimate PDF document. The names of the affected companies, the date, the scale of the damage and the response have not been disclosed.

SimonMed Imaging cyber-attack exposes 1.27 million people's personal information

1.3mImpact: Personal information of approximately 1.27 million people

A January 2025 cyber-attack at SimonMed Imaging exposed the personal information of approximately 1.27 million people, including US Social Security numbers. A class action lawsuit was subsequently filed alleging a failure to meet obligations to protect patient information. In November 2026, it emerged that lawyers were investigating hackers' claims.

BBC presenter Nick Robinson's X account hacked to promote crypto

Impact: Nick Robinson's X account misused to promote cryptocurrency

BBC presenter Nick Robinson's X account was hacked and used to promote cryptocurrency. The account carried promotions touting a Today programme cryptocurrency. Robinson said his social media account had been hacked.

Actress Trisha Krishnan's X account hacked

Impact: Compromise of Trisha Krishnan's X account

Actress Trisha Krishnan's X account was hacked. Krishnan told fans to be wary of suspicious posts appearing on the account.

Ransomware shuts down Michigan casino chain

Impact: Casino operations halted and computer systems paralysed

A casino chain in Michigan, US, halted operations owing to a ransomware attack. The Chippewa tribe's computer systems were also knocked out by the attack. On 28 February 2025, plans to reopen five Upper Peninsula casinos were announced.

Ransomware disrupts Michigan's Sault Tribe computer systems and operations

Impact: Disruption of tribal computer systems and operations

The Sault Tribe in Michigan was hit by a ransomware attack that disrupted tribal computer systems and operations. The tribe responded to the attack, and the tribal chairman said he would not meet the attackers' ransom demand.