Week 9, 2025 security incident report
Hacking and data breach incidents newly reported 2025.02.24 ~ 03.02
Four new cyber security incidents were confirmed in South Korea between 24 February and 2 March 2025, with Daekyo's leak of personal data on around 650,000 members in two hacks standing out most in terms of both scale and coverage. A personal data leak at Smartbill and a police raid on Dynamis One over a suspected Nexon data leak followed, making data leaks and related allegations the key issues in South Korea. Across all types in South Korea and abroad, 26 personal data breaches and 21 hacking/intrusion incidents outnumbered the 6 ransomware incidents and 2 malware incidents. Overseas, 51 new incidents were recorded, with DISA Global Solutions' data breach affecting 3.3 million people, the publication of Genea patients' sensitive information on the dark web and the hijacking of Pump.fun's official X account standing out.
By type
- Data breach27
- Hacking & intrusion20
- Ransomware6
- Malware2
Key incidents in South Korea
Repeated Daekyo Hacks Leak Data of About 650,000 Members
650kImpact: Personal data of about 650,000 members
Daekyo was hacked in the same way in August 2024 and February 2025, leaking the personal data of about 650,000 members. Attackers exploited a vulnerability in an affiliate's website and used web shells and malware to reach the member database, and the leaked data included dates of birth and phone numbers. Daekyo neglected to analyse and block the activity even after being alerted to abnormal behaviour during the first attack, and the investigation found unnecessary direct access allowed between the affiliate's web server and the member database. The Personal Information Protection Commission imposed a fine of 3.255 billion won and a corrective order.
Related reports: 28 · last report →E-tax invoice service SmartBill leaks personal information
Personal information was leaked from SmartBill, an electronic tax invoice service. A fine in the hundreds of millions of won was imposed over the leak.
Related reports: 2 →Dynamis One raided over suspected Nexon data leak
South Korean police raided game developer Dynamis One in connection with a suspected Nexon data leak. Whether data was leaked, the volume of data and the specific circumstances of the leak are unknown.
Read on Game Developer ↗Row over alleged hacking and liability for 1.29 million won loss
Impact: Alleged loss of 1.29 million won
A row broke out over who is liable to compensate a 1.29 million won loss. Claims that hacking was impossible clashed with claims of damage.
Read on 일요시사 ↗
Supply-chain breaches
BradfordScott sued over credit union customer data breach
Credit union customers filed a lawsuit against BradfordScott over a data breach. The customers' lawsuit will proceed.
Read on Bloomberg Law News ↗
Key incidents in other countries
Orange Group hack leaks company documents
Impact: Company documents leaked; attacker claims to have stolen more than 12,000 files
Orange Group was hacked and confirmed the breach after the attacker published company documents. The attacker was identified as a member of the HellCat ransomware group and claimed to have stolen more than 12,000 files. The actual confirmed scale of the theft and recovery measures have not been confirmed.
Related reports: 6 · last report →Sensitive patient data of Australian fertility clinic Genea posted on dark web
Impact: Sensitive information of fertility treatment patients published
A data breach occurred at Australian fertility clinic Genea, and sensitive patient information was published on the dark web. The Termite ransomware group claimed responsibility for the Genea hack. Patient backlash followed additional notices about the breach.
Related reports: 6 · last report →Pump.fun X account hacked to promote fake PUMP token
Impact: Official X account hijacked and used to promote a fake token
Pump.fun's X account was hacked and used to promote a fake governance token, PUMP. The token's market capitalisation surged to $5 million, and users were warned to avoid interacting with the hacked account.
Related reports: 6 · last report →US firm DISA Global Solutions breach affects 3.3 million people
3.3mImpact: Data of 3.3 million people
US employment screening and drug testing company DISA Global Solutions suffered a breach in which hackers accessed data of 3.3 million people. The company disclosed the scale of the damage, and an investigation for possible litigation followed.
Related reports: 5 · last report →US housing department screens hacked to play AI-generated video
Impact: AI-generated video played on screens inside the agency
TV and computer screens at the US Department of Housing and Urban Development were hacked to play an AI-generated video of Donald Trump kissing Elon Musk's feet. A whistleblower later alleged that an employee carried out the act during time allotted for trade union activity.
Related reports: 5 · last report →