Week 27, 2025 security incident report

Louis Vuitton cyber-attack exposes customer data in Korea and other countries

419kImpact: Personal information of customers in several countries, including 419,000 in Hong Kong and over 140,000 in Türkiye

Louis Vuitton suffered a cyber-attack that leaked the personal information of customers in several regions, including Korea, the UK, Türkiye and Hong Kong. The company said the regional leaks were linked to the same cyber-attack. In Hong Kong, 419,000 customers were affected, and the authorities launched an investigation.

Personal data of about 3.6 million Louis Vuitton Korea customers leaked

3.6mImpact: Personal data of about 3.6 million customers

Personal data of about 3.6 million Louis Vuitton Korea customers was leaked in three separate incidents in June 2025. Credentials for a customer management SaaS account were stolen after an employee's device was infected with malware, and the company became aware of unauthorised access to its system on 2 July. The Personal Information Protection Commission (PIPC) found failings including a lack of access controls and secure authentication, and imposed a fine of 21.385 billion won.

Subway online ordering system exposes customer data

Impact: Customer contact details and order histories exposed; scale unconfirmed

It was found that changing a number in a URL in Subway's online ordering system allowed other customers' contact details and order histories to be viewed without any authentication. The Personal Information Protection Commission (PIPC) launched an investigation into how the leak happened and its scale. Subway said the suspension of online ordering was unrelated to the personal data leak.

Interpark reports data breach amid signs of further leaks

Interpark reported a personal data breach to the Personal Information Protection Commission (PIPC). On 4 July, signs of a third personal data breach came to light.

Patient personal data leaked in National Assembly rare disease symposium booklet

Impact: Around 100 copies of a booklet containing patients' personal information distributed

Patients' personal information was printed in a booklet for a rare disease symposium at South Korea's National Assembly and leaked. Around 100 copies of the booklet were distributed; the specific number of people affected and the follow-up response have not been confirmed.

South Korean security firm hacked as AI-generated code attacks raised

A South Korean security company was hacked. Hacking using AI-generated code was also mentioned, but its link to the security company's breach is unknown.

UK data leak on Afghan allies leads to secret relocation of thousands

100Impact: Leak of information on Afghan allies and more than 100 British nationals; thousands of Afghans relocated

Information on Afghans who worked with British forces was leaked, leading to thousands being secretly relocated to the UK. The leaked data also included more than 100 British nationals, including intelligence officers and special forces members. The UK Government continued legal efforts to prevent the incident from being made public, and issues followed over compensation for some victims and the exclusion of others from compensation.

Ingram Micro ransomware attack halts operations and exposes data

42kImpact: Personal information of about 42,000 people and disruption of global operations

In July 2025, Ingram Micro suffered widespread system outages and operational disruption due to a SafePay ransomware attack. The company carried out system recovery and resumed global operations. In January 2026, it disclosed that personal information of about 42,000 people, including employee records, had been affected.

International Criminal Court detects and contains targeted cyber-attack

The International Criminal Court detected a sophisticated targeted cyber-attack and contained its spread. The court disclosed that a new security incident had occurred; the specific extent of the damage and the attack method have not been confirmed.

Call of Duty: WWII PC players hacked, service suspended

Impact: PC players hacked and game service temporarily suspended

PC players of Call of Duty: WWII were hacked while running the game through exploitation of a remote code execution vulnerability. Activision temporarily suspended the PC version following the attacks.

Hackers open floodgates at Norway's Risevatnet dam via control system

Impact: Dam control system taken over for several hours and floodgates opened

The control system of Norway's Risevatnet dam was hacked and its floodgates were opened. The attackers controlled the system for several hours. The head of Norway's intelligence service later attributed the attack to Russian hackers.