Week 10, 2026 security incident report

Personal data of 647 major donors leaked at Community Chest of Korea

647Impact: Personal information of 647 major donors

Personal information of 647 major donors, including entertainers and politicians, was leaked at the Community Chest of Korea. The Community Chest of Korea reported the incident to the Personal Information Protection Commission (PIPC) and apologised. Questions were subsequently raised about its personal data management procedures.

Hope Bridge exposes personal data of about 1,600 donors

1.6kImpact: Names, resident registration numbers and donation amounts of about 1,600 donors

Hope Bridge published its financial statements without redacting donors' names, resident registration numbers and donation amounts, exposing the personal information of about 1,600 people for around 20 days. The association discovered this in an internal audit on 25 February 2026 and removed the posting. The relevant authorities opened an investigation, and the Ministry of the Interior and Safety began an emergency inspection.

International ransomware group claims Hyundai Elevator hack

An international ransomware group claimed to have successfully hacked Hyundai Elevator. The claim came to light on 8 March, and whether a breach actually took place, the extent of the damage and the company's response have not been confirmed.

No damages awarded in 400,000-person data leak despite company negligence

400kImpact: Personal data of 400,000 people leaked

In a case involving the leak of personal data of 400,000 people, the company's negligence was recognised but no damages were awarded. The Supreme Court's ruling was covered; the company's name, the date of the leak, its cause and the response measures have not been confirmed.

Signs of hacking found in Yeosu-Suncheon unauthorised card payment case

Unauthorised card payments occurred in Yeosu and Suncheon. Police found signs of hacking in connection with the case.

Signs of hacking at Aju Pharm, hacker claims internal data theft

Signs of hacking have emerged at Aju Pharm, a subsidiary of Aju Holdings. A hacker claimed to have stolen internal data; whether any data was actually stolen, the scale of the damage and the response measures have not been confirmed.

Court rules pseudonymised dog farm audit data still a personal data leak

A flood of protest calls followed over a nationwide map of dog farms. A court ruled that even pseudonymised parliamentary audit data on dog farms constituted a personal data leak. The specific scale of the leak and the date it occurred have not been confirmed.

LexisNexis hack leaks legacy data and customer records

Impact: Legacy data and some customer records leaked

LexisNexis's legal and professional information division was breached, resulting in unauthorised access to legacy data and some customer records. The attackers published stolen files and claimed to have also accessed data on government and law firm users. LexisNexis said it had confirmed the breach and contained the threat.

FBI surveillance system breach exposes phone numbers

Impact: Phone numbers of surveillance targets exposed

The FBI's surveillance system was hacked, exposing the phone numbers of surveillance targets. A China-linked attack is suspected, and the possibility of intrusion through the supply chain has also been raised. The White House assisted with the investigation, and the FBI classified the incident as a major cyber incident and notified Congress.

TriZetto breach exposes health and personal data of over 3.4 million

3.4mImpact: Health and personal information of more than 3.4 million people

Health and personal information of more than 3.4 million people was leaked from Cognizant's TriZetto Provider Solutions. The company confirmed that the data had been stolen. The specific method of intrusion, the date of the incident and any further response measures have not been confirmed.

Israel's hack of Iranian surveillance camera network tied to military operations

Impact: Breach of Iran's surveillance and traffic camera networks

Israel hacked Iran's surveillance camera network. The hacking of Tehran traffic cameras and US intelligence were used in an operation to assassinate Iran's Supreme Leader, and cyber operations including the hijacking of TV broadcasts also supported the war with Iran.

Madison Square Garden hack results in data breach

Madison Square Garden confirmed a data breach several months after being attacked by hackers. A class action over the data breach was subsequently filed, and the company was cleared of the related legal action in July 2026.