Week 16, 2025 security incident report

Personal data of around 51,000 T-money customers leaked

51kImpact: Personal information of around 51,000 customers

The personal information of around 51,000 T-money customers was leaked. The attacker accessed the website from overseas IP addresses using previously obtained account credentials, and it was suggested that addresses and mobile phone numbers may have been exposed in addition to names and email addresses. T-money reported the incident to the relevant authorities and carried out measures such as password resets, and the Personal Information Protection Commission (PIPC) later imposed a fine of 534 million won.

Chuksaro hack leaks 3,132 farmers' personal records on dark web

3.1kImpact: 3,132 farmers' personal records

The Chuksaro website was hacked, and 3,132 farmers' personal records were leaked on the dark web. The leaked information was reportedly personal data from five years earlier.

Samsung Electronics X account hacked to spread scam posts

Impact: Fraudulent posts spread via the X account

Samsung Electronics' Twitter/X account was hacked and used to spread fraudulent posts. The account compromise and the posts came to light on 15 April 2025, and the specific scale of the damage and the response have not been confirmed.

Democratic Party of Korea website hit by suspected DDoS during all-member vote

Impact: Three website access outages

On 13 April 2025, during an all-member vote on the Democratic Party of Korea's primary rules, traffic to the party's website surged and access was disrupted three times. Suspecting a DDoS attack, the party decided to report the security incident to the Korea Internet & Security Agency (KISA) and request an investigation. Online voting, which was conducted on a separate server, suffered no further damage.

Hacking victim loses millions of won, says Apple has not responded

Impact: Several million won

A case emerged of a person who lost several million won to hacking. The victim had not received a response from Apple, and the specific attack method and date of the incident have not been confirmed.

Pao's YouTube channel hacked

Pao's YouTube channel was hacked. The timing of the incident, the scale of the damage and the response have not been confirmed.

DaVita ransomware attack leads to large-scale patient data leak

2.4mImpact: Information on 2.4 million patients

US dialysis services provider DaVita was hit by a ransomware attack on 12 April 2025, which affected some operations, though patient care continued. Interlock claimed to have stolen about 1.5TB of data and published it, and the company began reviewing the published material. The number of people affected was tallied at about 2.7 million in August, and later on 25 August it was reported that the leak of information on 2.4 million patients had been confirmed. The company disclosed additional costs of $13.5 million for recovery and patient care, and in 2026 agreed to a $15 million settlement in related litigation.

4chan hack leaks internal data and knocks site offline

Impact: Internal data leak, service outage and exposure of users' personal information

The online imageboard 4chan was hacked on 15 April 2025, leaking internal data and taking the service down. Access remained disrupted after the attack, and the outage and exposure of users' personal information continued until 21 April.

Hacked Seattle pedestrian crossings play voice impersonating Bezos

Impact: Impersonating audio played from Seattle pedestrian crossing buttons

Pedestrian crossing buttons in Seattle in the US were hacked to play audio mimicking Jeff Bezos's voice. The impersonating audio included a message urging that the rich not be taxed. The Seattle Department of Transportation looked into ways to strengthen security, and it was later suggested that the hack may have been carried out with just a mobile phone.

4chan hack raises fears anonymous moderators could be exposed

Internet message board 4chan was hacked. Concerns were raised that the identities of its long-anonymous staff could be exposed, and the specific extent of the leak and response measures have not been confirmed.

China alleges hacking of Asian Winter Games network

China claimed that the United States carried out cyber-attacks during the Asian Winter Games. Chinese police accused the US National Security Agency of hacking the Games' network and released the names of individuals allegedly involved in the hacking.