Week 8, 2025 security incident report
Hacking and data breach incidents newly reported 2025.02.17 ~ 02.23
In South Korea, the leak of personal data of 427,464 full members after a Duo employee's PC was infected with malware stood out as the largest incident. Data leaks continued across multiple sectors, including the exposure of names and resident registration numbers in Yongin's building registers and a customer data leak at Gimpo CC, and a case of malware being executed after plugging in a USB device bought directly from an overseas seller was also confirmed. In the overall tally by type, personal data breaches were the most common at 34, far exceeding the 9 hacking/intrusion incidents and 5 ransomware incidents. Overseas, the theft of around $1.5 billion in crypto assets from Bybit stood out, and large-scale leak incidents also occurred, including ransomware damage at Insight Partners and the exposure of more than 14 million customer delivery records.
By type
- Data breach35
- Hacking & intrusion8
- Ransomware5
- Phishing & smishing2
- Malware1
Key incidents in South Korea
Malware on Duo Employee PC Leaks Data of 427,464 Members
427.5kImpact: Personal data of 427,464 full members
In January 2025, a Duo employee's work PC was infected with malware, leaking the personal data of 427,464 full members. The leaked data included resident registration numbers, education, religion, physical information, marital history and family relations. Duo was fined about 1.2 billion won for delays in reporting the leak and failing to notify victims, and police investigations and damages lawsuits by victims followed.
Related reports: 64 · last report →Hacking issue raised involving Sungsimdang
A hacking issue involving Sungsimdang was raised. The specific timing, attack method, scale of the damage and response have not been confirmed.
Read on 보안뉴스 ↗Mass leak of Yongin building registers exposes names and resident registration numbers
Impact: Numerous building registers, with names and resident registration numbers
Building registers from Yongin were leaked en masse. Names and resident registration numbers were exposed in the leaked building registers.
Read on 한국경제 ↗Gimpo CC hack leaks customer information
Impact: Customer information
Gimpo CC was hit by a hacking attack that leaked customer information. Gimpo CC is notifying people of the breach.
Read on 더구루 ↗Malware runs when USB stick bought via overseas direct purchase is plugged in
A case occurred in which malware ran when a USB stick bought through an overseas direct purchase was plugged in. Concerns were raised about personal data leaks and hacking originating from China.
Read on Chosunbiz ↗
Key incidents in other countries
Bybit hack steals about $1.5 billion in cryptocurrency
Impact: About $1.5 billion in cryptocurrency
On 21 February 2025, cryptocurrency exchange Bybit disclosed that about $1.5 billion in crypto assets had been stolen in a hack. The attack was carried out through the compromise of a Safe{Wallet} developer's device, and the US Federal Bureau of Investigation attributed it to North Korea. Bybit's chief executive said the losses would be covered with bridge loans, and Bybit later filed a civil lawsuit in a US court against North Korea and Lazarus.
Related reports: 67 · last report →Insight Partners ransomware attack exposes data of 12,657 people
12.7kImpact: Personal information of 12,657 people
US investment firm Insight Partners had the personal information of 12,657 people, including employees and limited partners, exposed in a ransomware attack. The attackers broke in through social engineering in October 2024, stole data and then encrypted servers in January 2025. The company disclosed the breach and began notifying victims.
Related reports: 10 · last report →Black Basta chat leak exposes members and attack methods
Impact: Exposure of internal chat logs and information on key members and targets
A massive leak of internal chat logs from the ransomware group Black Basta revealed key members, targets and attack methods. The leaked logs also showed signs of internal conflict and a halt in activity.
Related reports: 7 · last report →Medusa gang demands $2 million from UK's HCRG Care Group
The Medusa extortion gang demanded $2 million from the UK's HCRG Care Group. The actual scale of the damage, the specific intrusion method and the organisation's response have not been confirmed.
Related reports: 4 · last report →More than 14 million customer shipping records exposed
14mImpact: More than 14 million customer shipping records
More than 14 million shipping records containing customer information were exposed. The affected company, the date of the leak, the cause and the response have not been confirmed.
Related reports: 3 · last report →