Week 11, 2026 security incident report
Hacking and data breach incidents newly reported 2026.03.09 ~ 03.15
From 9 to 15 March 2026, four new cybersecurity incidents were identified in South Korea, with the i-Scream Media case, in which 200,000 records of primary school teachers' personal data were leaked, standing out most in both scale of damage and volume of coverage. Damage was concentrated in education, extending to personal data leaks affecting 266 students in Bucheon and some 1,300 registered students in the Daegu area, while a hack of Intuitive also leaked sensitive information on South Korean medical staff. Of 45 new incidents overall, personal data leaks were the most common at 29, followed by hacking/intrusions at 8, ransomware at 6 and malware at 2. Overseas, a cyber-attack on Stryker paralysed its global business network and disrupted operations, including delayed surgeries for some patients, and data leaks were also confirmed at a contractor of Ericsson's US subsidiary, Starbucks and TELUS Digital.
By type
- Data breach26
- Hacking & intrusion7
- Ransomware5
- Malware2
Key incidents in South Korea
i-Scream Media breach exposes about 200,000 teacher-member records
200kImpact: About 200,000 personal information records belonging to teacher members
In March 2026, about 200,000 personal information records belonging to teacher members were leaked from i-Scream Media, exposing names, telephone numbers, dates of birth, school information, user IDs and other details. The company announced the breach on 11 March, while teachers’ organisations demanded accountability and measures to address the harm, and lodged complaints with the Anti-Corruption and Civil Rights Commission. Follow-up findings revealed that the company had not detected the breach itself before the Korea Internet & Security Agency (KISA) identified signs of anomalous activity, and that it had not obtained ISMS certification, which had been mandatory for it since 2022.
Related reports: 18 · last report →Bucheon secondary pupils break into staffroom, leak data of 266 pupils
266Impact: Personal information of 266 pupils
Secondary school pupils in Bucheon forced open the door of the staffroom and entered without permission to find out their class assignments. They photographed the personal information of 266 pupils and leaked it on social media.
Related reports: 3 →AI learning materials provider breach affects more than 1,300 Daegu pupils
1.3kImpact: Personal information of more than 1,300 registered pupils in the Daegu area
Personal information was leaked from a company that provides AI learning materials. Those affected included more than 1,300 registered pupils in the Daegu area.
Read on 영남일보 ↗
Supply-chain breaches
Ransomware attack on supplier disrupts Ontario health agency
Impact: Disruption to the Ontario provincial government health agency's operations
A supplier to a health agency of the Ontario provincial government in Canada was hit by a large-scale ransomware attack in 2025. The attack left the health agency struggling to respond. The specific extent of the damage and recovery measures have not been confirmed.
Read on Global News ↗
Key incidents in other countries
Stryker cyber-attack disrupts global network and medical device supplies
Impact: Global network outage, wiping of employee devices and exposure of employee information, delays to some operations, and disruptions to medical device supplies
US medical device company Stryker suffered a cyber-attack that shut down its global network and wiped employees' devices. Pro-Iranian hackers claimed responsibility, and employee information was exposed and some patients' operations were delayed. The company contained the attack and worked to restore normal order processing and production, but continuing supply disruptions led it to lower its 2026 financial outlook.
Related reports: 72 · last report →Iran-linked group claims cyber-attack on US medical device maker
Impact: Claimed damage to 200,000 servers and 50 TB of data
A US medical device maker was hit by a cyber-attack, and an Iran-linked hacking group claimed responsibility. The group said the attack was retaliation for the bombing of a school in Minab, and there were also claims of damage involving 200,000 servers and 50 TB of data.
Related reports: 10 · last report →Canadian retailer Loblaw customer personal data leaked
Impact: Customer personal information
Customer personal information was leaked at Canadian retailer Loblaw. Loblaw investigated the breach and notified customers. The exact date of the incident and the extent of the damage have not been confirmed.
Related reports: 9 · last report →Intuitive hack exposes sensitive data of South Korean medical staff
Impact: Sensitive information of South Korean medical staff
US surgical robot maker Intuitive was hacked, exposing sensitive information of medical staff in South Korea. The specific scale of the leak, the date of the incident and the company's response have not been confirmed.
Related reports: 8 · last report →Ericsson US supplier hack exposes data of more than 15,000 people
15kImpact: Personally identifiable information and personal health information of more than 15,000 people
Ericsson's US subsidiary suffered a data breach linked to the hacking of a third-party service provider. Personally identifiable information and personal health information of more than 15,000 people were exposed, including customer and employee information. Ericsson's US subsidiary disclosed and confirmed the breach.
Related reports: 7 · last report →