Week 12, 2025 security incident report
Hacking and data breach incidents newly reported 2025.03.17 ~ 03.23
Between 17 and 23 March 2025, two incidents were confirmed in South Korea: signs of a leak of 4,900 personal data records at CJ Olive Young and a leak of users' personal data from the hacking of the university student community Knock. Among South Korean incidents, the CJ Olive Young case, for which the scale of the leak was given, stood out, and personal data damage occurred in both the retail sector and a university student community. Of 44 new incidents overall, personal data breaches were the most common at 35, forming the dominant type. Overseas, the leak of information on more than 517,000 people at the Pennsylvania State Education Association was the largest among the major incidents, and leaks of bank customer data and ransomware attacks on healthcare providers that leaked patients' medical, identity and financial information as well as cancer treatment photos also occurred.
By type
- Data breach32
- Hacking & intrusion6
- Malware1
- Ransomware1
Key incidents in South Korea
Signs of 4,900 personal data records leaked at CJ Olive Young
4.9kImpact: Signs of 4,900 personal data records leaked
Signs emerged that 4,900 personal data records were leaked at CJ Olive Young. The cause of the leak, the date of the incident and the company's response have not been confirmed.
Read on 이코노미스트 ↗University student community Knock hacked, user data leaked
Impact: Leak of users' personal data
Knock, an online community for university students, was hacked and users' personal data was leaked. The scale of the leak, the date of the incident and the operator's response have not been confirmed.
Read on 연세춘추 ↗
Supply-chain breaches
New Era Enterprise data breach prompts notices to insurer's customers
A data breach occurred at New Era Enterprise. New Era Enterprise notified customers of Central States Health & Life Co. of Omaha of the incident, and the specific scale and timing of the breach have not been confirmed.
Read on Bloomberg Law News ↗
Key incidents in other countries
Pennsylvania State Education Association hack exposes data of over 517,000 people
517kImpact: Data of more than 517,000 people
The Pennsylvania State Education Association announced that a cyber-attack in July exposed the data of more than 517,000 people. The affected data reportedly included member and staff records. The breach was disclosed in March 2025, and an investigation followed.
Related reports: 9 · last report →Western Alliance Bank breach exposes data of 21,889 customers
21.9kImpact: Data of 21,889 customers
A data breach linked to a file transfer software vulnerability affected 21,889 customers of Western Alliance Bank. The incident was linked to the Cleo hack, and the bank notified affected customers of the breach. An investigation for related legal action followed.
Related reports: 6 · last report →Baidu vice-president's daughter doxxes internet user
Impact: Internet user's personal information spread
The daughter of a Baidu vice-president spread the personal information of an internet user who had insulted Jang Won-young. She and the vice-president apologised, and Baidu denied allegations that its own data had been leaked. How the personal information was obtained and the scale of the damage have not been confirmed.
Related reports: 4 · last report →OBI Seafoods leaks Social Security numbers of 19,014 people
19kImpact: Social Security numbers of 19,014 Americans
A data breach at OBI Seafoods affected 19,014 Americans and exposed their Social Security numbers. A review of potential legal action over the breach followed.
Related reports: 3 · last report →Sperm bank California Cryobank data breach
A data breach occurred at sperm donation company California Cryobank. The company disclosed the breach, and an investigation into possible related litigation followed.
Related reports: 3 · last report →