Week 42, 2025 security incident report

SK Shieldus hack leaks 15.1GB of client security data

Impact: 15.1GB of data relating to 120 private companies and numerous public bodies

SK Shieldus was hacked in October 2025, leaking 15.1GB of client-related data. It was found that security monitoring system deployment materials and solution verification materials for 120 private companies and numerous public bodies were leaked through the personal email accounts of two employees that were connected to a honeypot while automatically logged in. The Personal Information Protection Commission (PIPC) launched an investigation, and SK Shieldus began a full review of 80,000 emails.

National Health Insurance Service Employee Leaks Members' Personal Data to Loan Companies

Impact: Personal data of several hundred employed insured members

Personal data of several hundred employed insured members was leaked from the National Health Insurance Service to loan companies. The employee who sold the personal data was dismissed, and it was raised as a problem that victims had not been notified of the leak.

Incheon Seo District official's mistake exposes personal data of 1,000 people for 50 days

1kImpact: Personal information of 1,000 people, exposed for 50 days

In Seo District, Incheon, the personal information of 1,000 people was exposed for 50 days due to a civil servant's mistake. The personal information filter also failed to work.

KRISO reports no damage despite suspected North Korean hack

The Korea Research Institute of Ships and Ocean Engineering reported no damage despite being hacked in an attack believed to be the work of North Korea. On 13 October 2025, it was pointed out that criteria for damage from cyber intrusions need to be established.

Power equipment maker BHI hacked, design drawings and other data leaked

Impact: Internal materials including design drawings

Power generation equipment manufacturer BHI suffered a hacking attack. Internal materials including design drawings were leaked.

AIP Asset Management hit by ransomware, personal data involved

Impact: Personal information such as names

AIP Asset Management was infected with ransomware. The information affected by the infection included personal information such as names.

Personal data leak row involving Sandbox's Salppaejo

A controversy over a personal data leak arose in connection with Sandbox's Salppaejo. The specific scale and cause of the leak and follow-up measures have not been confirmed.

Row over contract penalty for call-recording leak charged to former agents

Impact: Leak of call centre agent recordings

A subcontracting penalty was incurred in connection with a leak of call centre agents' recordings. Controversy arose over the penalty being charged to agents who had left the company.

Culture Ministry unaware of breach after Phrack report on government hacking

A Phrack report on the hacking of government ministries became known in August 2025. The Ministry of Culture, Sports and Tourism had not been aware of the breach.

Vietnam Airlines hack exposes customer membership details and phone numbers

Impact: Customer personal information including membership details and phone numbers

Customer personal information was leaked in a hack at Vietnam Airlines. The leaked information included membership details and phone numbers. Vietnam Airlines apologised for the customer data leak and said restoring trust would be its top priority.

Ransomware attackers claim attack on Methodist Church of Southern Africa

Ransomware attackers claimed to have attacked the Methodist Church of Southern Africa. The date of the incident, the extent of the damage and the church's response have not been confirmed.

China blames US for cyber-attack on National Time Service Center

China claimed that its National Time Service Center had been hit by a cyber-attack. China named the United States as being behind the attack. The specific scale of the damage, the attack method and the response measures have not been confirmed.

US user loses $3 million in XRP in wallet hack

Impact: About $3 million in XRP

A US man lost about $3 million worth of XRP after his Ellipal hardware wallet was hacked. The stolen funds were moved to sanctioned money launderers, and a possible link to a Cambodian group was raised.

Brotherhood claims attack on Western Australian commercial supplier

The ransomware group Brotherhood claimed a cyber-attack on a commercial goods supplier in Western Australia. The name of the affected company, the date of the incident and the specific damage and response have not been confirmed.