Week 14, 2025 security incident report
Hacking and data breach incidents newly reported 2025.03.31 ~ 04.06
Between 31 March and 6 April 2025, two incidents were recorded in South Korea: a case in which forwarding personal data included in complaint documents submitted through the People's Sinmungo (e-People) portal was ruled a human rights violation, and a case in which an AliExpress user's account was hacked and 2 million won in unauthorised payments were made. South Korean coverage focused more on the People's Sinmungo case, which was the subject of two articles, and the main patterns were problems in handling personal data and financial losses from account compromises. By type overall, there were 16 hacking/intrusion incidents, 12 personal data breaches and 8 ransomware incidents. Overseas, among 34 incidents, allegations of a leak of personal data on more than 200 million X users stood out in scale, while suspected leaks at Royal Mail linked to a third-party attack, knock-on damage from Kelly Benefits to Guardian Life Insurance, and disruption to casino and healthcare services for the Lower Sioux Indian Community also stood out.
By type
- Hacking & intrusion15
- Data breach11
- Ransomware8
Key incidents in South Korea
Rights commission rules sharing of e-People complaint documents violated human rights
Impact: Personal information contained in complaint documents
The National Human Rights Commission of Korea ruled that a case in which complaint documents filed through e-People were passed to another person, leaking personal information, constituted a human rights violation. The external sharing of complaint documents containing personal information was the subject of the ruling.
Related reports: 2 →Hacked AliExpress account used for 2 million won in charges
Impact: 2 million won in unauthorised charges on a user's account
An AliExpress user's account was hacked and 2 million won was charged without the user's knowledge. The date of the incident, the specific intrusion route and follow-up measures have not been confirmed.
Read on 더리브스 ↗
Supply-chain breaches
Cyber-attacks on US education sector expose student and staff data
Impact: Data of thousands of students in Minnesota and thousands of students and staff in Alaska
A nationwide cyber-attack across the US exposed the data of thousands of students in Minnesota. In Alaska, thousands of students and staff were also affected by data breaches. Cherokee County education officials discussed a new data breach issue at a meeting.
Related reports: 2 · last report →
Kelly Benefits data breach affects 553,000 people
553kImpact: Information of 553,000 people
Sensitive information was leaked from Kelly Benefits, affecting 553,000 people. Guardian Life customers were also notified of the breach.
Related reports: 3 · last report →
Key incidents in other countries
Lyon Living notifies victims of data breach
Lyon Living filed a data breach report. It sent notification letters to victims, while the type and scale of the information leaked have not been confirmed.
Related reports: 3 · last report →Sam's Club data breach allegations lead to lawsuits
Sam's Club launched an investigation into claims of an attack linked to Clop ransomware. A data breach lawsuit linked to the Cleo file transfer system was subsequently filed. On 24 April 2025 it was reported that a data breach lawsuit brought by a former employee had been dropped.
Related reports: 3 · last report →Royal Mail investigates alleged data leak linked to third-party cyber-attack
Impact: 144GB of data, according to the attacker's claim
An attacker claimed to have stolen 144GB of data from Royal Mail. Royal Mail investigated the alleged leak, which was linked to a cyber-attack on a third party. Operations were not affected.
Related reports: 3 · last report →Ransomware attack on Lower Sioux disrupts casino and health services
Impact: Suspension of some casino gaming operations and disruption of tribal health services
The Lower Sioux Indian Community in Minnesota was hit by a ransomware attack that disrupted its casino and tribal health services. Some gaming operations at the casino were suspended.
Related reports: 3 · last report →Over 20,000 Australian super fund accounts breached, savings stolen
Impact: More than 20,000 accounts breached and some members' retirement savings stolen
Major Australian superannuation funds were hit by credential stuffing attacks that took over members' accounts. More than 20,000 accounts were breached, and some members' retirement savings were stolen.
Related reports: 3 · last report →