Week 5, 2026 security incident report

Ttareungyi server hack leaks 4.62 million subscriber records

4.6mImpact: About 4.62 million records of subscriber personal information

In June 2024, the Ttareungyi server was hacked, leaking about 4.62 million records of subscriber personal information. The leaked data included user IDs, mobile phone numbers, email addresses, home addresses and dates of birth. Police referred two teenagers, who were middle school pupils at the time of the offence, to prosecutors without detention, and Seoul Mayor Oh Se-hoon apologised for the personal data leak.

Actor Jang Dong-ju loses billions of won to phone hack and blackmail

Impact: Financial losses of billions of won and debt

Actor Jang Dong-ju said on 29 January 2026 that after his mobile phone was hacked he was blackmailed for months and suffered financial losses of billions of won. He said he had sold his home and fallen into debt, and expressed his intention to repay the debt. He later publicly rebutted malicious comments and speculation about the losses.

Noh Yoo-jung reveals phone hacking and financial hardship

TV personality Noh Yoo-jung suffered a mobile phone hack. She said she had fallen on hard times after her divorce and the hacking, and was working as a washer-up at a restaurant.

Choi Daniel's YouTube channel hacked, unrelated videos posted

Impact: Unrelated videos posted on YouTube channel and channel deleted

Actor Choi Daniel's YouTube channel was hacked and videos unrelated to him were posted. After the channel was deleted, a recovery process got under way, and plans to strengthen security systems were later announced.

Ransomware breach hits university hospital at start of year

A ransomware breach occurred at a university hospital in early 2026. The issue of insufficient security investment was also raised. The name of the affected hospital, the specific scale of damage and the response have not been confirmed.

Kangwon National University Hospital restores imaging system crippled by ransomware

Impact: Picture archiving and communication system (PACS) crippled

The picture archiving and communication system (PACS) at Kangwon National University Hospital was crippled by a ransomware attack. News of the system's restoration emerged on 29 January 2026, and the hospital said there had been no disruption to patient care.

NHN Commerce e-Namu hack leaks data of 122 customers

122Impact: Personal information of 122 customers of 17 merchants

In September 2024, an SQL injection attack exploiting a vulnerability in the shopping basket page of the online shop builder e-Namu leaked the personal information of 122 customers of 17 merchants using the service. The Personal Information Protection Commission (PIPC) found inadequate security management and breach notification and imposed a fine of 8.7 million won and an administrative penalty of 4.5 million won on NHN Commerce.

Chonnam National University Hospital restores network after signs of malware intrusion

Impact: Emergency checks and recovery of some PCs; no personal information leaked

On 26 January 2026, Chonnam National University Hospital detected signs of a malware intrusion suspected to be ransomware and carried out emergency checks and recovery on some PCs. The hospital said it completed restoration of its network that afternoon, resumed normal operations, and that no personal information was leaked.

Panera Bread data breach exposes 5.1 million accounts

Impact: Data from 5.1 million accounts

Data from 5.1 million Panera Bread accounts was leaked. ShinyHunters initially claimed to have obtained 14 million customer records and posted them on the dark web, but the scale was later put at 5.1 million accounts. The attack was linked to a compromise of Microsoft Entra single sign-on.

Saudi-critical YouTuber's devices hacked with Pegasus spyware

Impact: Hacking of the victim's devices, being followed and assaulted

A British satirical YouTuber who criticised the Saudi leadership had his devices hacked using Pegasus spyware. The victim was also followed and assaulted in London. The High Court found that Saudi Arabia had hacked the devices and ordered it to pay the victim £3 million in damages.

Australia's ABC News Facebook account hacked to post explicit images

Impact: Explicit images posted on the Facebook account

The Facebook account of Australia's ABC News was hacked and explicit images were posted. The posts included images of Bonnie Blue.

KPMG Netherlands denies ransomware breach claims

Nova claimed to have hacked KPMG's Netherlands office. KPMG denied the claims of a ransomware attack and system breach. Whether a breach actually occurred and the scale of damage have not been confirmed.

Ransomware attack disrupts city systems in New Britain, US

Impact: City government systems disrupted for several days; possible exposure of personal information

The city of New Britain in the United States was hit by a ransomware attack that disrupted city government systems for several days. The FBI launched an investigation, and city officials later said personal information may have been exposed.