Week 26, 2026 security incident report

Data of 113,000 people leaked from Korea Food Industry Association training site

113kImpact: Personal information of about 113,000 people

Signs emerged that personal information of about 113,000 people had been leaked from the Korea Food Industry Association's training website. The leaked data included eight items such as passwords and contact details. The association disclosed signs of abnormal access believed to be an external attack.

Over 82,000 taxpayer personal data records leaked from Yongin Tax Office

82kImpact: More than 82,000 taxpayer personal data records

More than 82,000 taxpayer personal data records were leaked externally from the Yongin Tax Office. It emerged that an employee had sent the information to a predecessor, and the Yongin Tax Office posted an apology.

Gangseo Market wholesale corporation paralysed by hack

Impact: Operations of the Gangseo Market wholesale corporation paralysed

It was revealed in June that a wholesale corporation at Gangseo Market had been paralysed by a hacking attack. The incident raised security concerns over farmers' shipment information.

Over 80,000 taxpayer records leaked from tax offices during 2025 impeachment crisis

80kImpact: More than 80,000 taxpayer records

More than 80,000 taxpayer records were leaked from tax offices during the 2025 impeachment crisis. The compromised data was taxpayer-related information; the specific categories and the response have not been confirmed.

Financial sector steps up defences after platform data leak

Personal information was leaked from a platform. In response, the financial sector expanded its defensive measures.

Hacking damage continues even after switching networks and joining compensation streaming service

After switching mobile networks because of hacking damage, a customer was hacked again. Hacking damage also occurred on a streaming (OTT) service subscribed to as customer compensation, and the specific providers and timing have not been confirmed.

National Tax Service official suspended for mass leak of taxpayer data

Impact: Mass leak of taxpayer information

An official at Korea's National Tax Service leaked a large volume of taxpayer information. The official was suspended from duty on 25 June 2026.

Tata Electronics hack leaks iPhone 18 Pro materials

Impact: Leak of iPhone 18 Pro supplier lists, component information, photos and internal test images

India's Tata Electronics, a key supplier to Apple and Tesla, confirmed a data breach on 22 June. The ransomware attack leaked Apple iPhone 18 Pro supplier lists, component information, photos and internal test images. The company strengthened its internal controls, and Indian authorities launched an investigation into the breach.

Klue hack leaks Salesforce customer data from numerous companies

Impact: Customer data and other information of 200 companies

After Klue was hacked, Salesforce customer relationship management data from multiple companies was leaked through stolen OAuth tokens. Several cyber security companies, including Huntress, confirmed they had been affected, and the number of affected companies was reported at 200. Klue said the criminals were deleting the stolen customer data, but threats from other hackers continued.

Japan's KDDI hack leaks data of more than 12 million people

12mImpact: More than 12 million people affected; up to 12.23 million email addresses and 7.61 million passwords leaked

The email system of Japanese telecoms operator KDDI was hacked, affecting more than 12 million people whose personal data was leaked. Initially, the possible leak of up to 14.22 million customer records was raised, and later the scale of the leak was reported as up to 12.23 million email addresses and 7.61 million passwords. Vulnerabilities in a partner's software and in the internet service delivery system were identified as the starting point of the attack.

Malaysian Ministry of Health urges public to avoid website after hack

Malaysia's Ministry of Health confirmed its website had been hacked and advised the public to refrain from accessing the site. The ministry directed people to use verified platforms, and the National Cyber Security Agency issued a security advisory on a critical vulnerability linked to the hack.

Madison Square Garden hack exposes 26 million visitor records

26mImpact: 26 million visitor records

Madison Square Garden was hacked, exposing 26 million visitor records, including those of celebrities and customers. A class action filed later alleged that biometric data was also exposed in the cyber-attack.