Week 43, 2025 security incident report

Kyungpook National University system error exposes personal data of over 7,000 people

7kImpact: Personal data of more than 7,000 people

In 2025, a system error at Kyungpook National University exposed the personal data of more than 7,000 people. The incident followed a leak of postgraduate students' data the previous year, and problems with personal data management and information security were raised during the parliamentary audit on 22 October.

Personal data of 87,000 Hanyang CC and Seoul CC members leaked

87kImpact: Personal data of 87,000 members

The personal data of 87,000 members of Hanyang CC and Seoul CC was leaked. The Personal Information Protection Commission (PIPC) sanctioned both the entrusting party and the contractor handling the personal data, imposing fines totalling over KRW 200 million on the two golf clubs.

Golf course operators' entrusting party and contractor fined over personal data leak

A personal data leak occurred at golf course operators. Both the entrusting party and the contractor handling the personal data were found liable, and fines were imposed on the two companies.

String of hacking incidents and IT outages at banks, card issuers and insurers

Hacking incidents and IT outages occurred one after another at banks, card companies and insurers. iM Bank and Hana Card were among the financial firms named as having suffered hacking incidents.

CVs and cover letters of 7.3 million jobseekers leaked in hack

7.3mImpact: CVs and cover letters of 7.3 million jobseekers

A hack leaked the CVs and cover letters of 7.3 million jobseekers. The leaked material included CVs and cover letters written while preparing for employment.

Food and drink company S FOOD hit by ransomware extortion

Food and drink company S FOOD received a ransomware extortion threat. Whether any data was actually encrypted, the scale of the damage and the response have not been confirmed.

ResMed customer prescription records and other sensitive data leaked

Impact: Sensitive information including customer prescription records

Sensitive information including customers' prescription records was leaked at CPAP device maker ResMed. The timing of the leak and the number of affected customers have not been confirmed.

Allegations of telecoms hack cover-ups raised at South Korean parliamentary audit

Allegations that telecoms operators covered up hacks were raised at the parliamentary audit of the Science, ICT, Broadcasting and Communications Committee. Questions were also raised about the effectiveness of systems such as security certification and the role of the National Intelligence Service (NIS).

iM Bank and SC Bank hit by hacking

iM Bank and SC Bank suffered hacking incidents. Security concerns were raised as the financial sector became a target for hackers.

White-hat hacker notified South Korean military, government and companies of hacks since June

The white-hat hacker who wrote the Phrack report directly notified South Korea's military, government and companies of hacks starting in June. Those notified included not only the military and government but also companies.

MUJI warns of possible leak of 27.26 million customer records and 1.09 million card numbers

27.3mImpact: Possible exposure of up to approximately 27.26 million customer records and approximately 1.09 million card numbers

Unauthorised access to systems at MUJI operator Ryohin Keikaku may have exposed up to approximately 27.26 million app and online shop customer records, including those of former members, and approximately 1.09 million card numbers. The customer information included email addresses, dates of birth and gender, while the card numbers had been collected for a benefits programme that ended in 2021 and were never deleted. The company acknowledged vulnerabilities in parts of its systems and shortcomings in information security and customer data management, reported the incident to the relevant authorities and said it would strengthen internal controls. It also postponed reopening its online shop because of possible unauthorised logins.

Askul ransomware attack halts orders and deliveries, leaks data

740kImpact: Leak of about 740,000 data records and suspension of orders and deliveries

Japanese online retailer Askul's systems were paralysed by a ransomware attack, forcing it to suspend order intake and deliveries, and Muji's online shop was also affected. About 740,000 data records were later confirmed to have been leaked. Askul resumed limited online sales about six weeks after the attack and used generative AI in its recovery process.

Cyber-attack disrupts operations at two Massachusetts hospitals

Impact: Network outages and service disruptions at two hospitals

Two hospitals in Massachusetts suffered network outages and service disruptions due to a cyber-attack. One of the affected hospitals declared a code black. The names of the hospitals, the attack method and whether systems have been restored have not been confirmed.

Collins Aerospace cyber-attack and separate data theft

Collins Aerospace was hit by a cyber-attack linked to disruption at European airports, and the Everest ransomware gang claimed responsibility for the attack. Separately, a 2022 infostealer infection led to another breach, with old passwords and a delayed response cited as enabling the data theft.

Iran blamed for cyber-attack on Israeli hospital

A hospital in Israel was hit by a cyber-attack on Yom Kippur. Israel named Iran as being behind the attack on the hospital.