Week 27, 2026 security incident report
Hacking and data breach incidents newly reported 2026.06.29 ~ 07.05
From 29 June to 5 July 2026, three new incidents were recorded in South Korea, with the leak of 17,551 personal data records of Woori Bank NFT users drawing the most attention with 56 articles. A ruling awarding damages for emotional distress over the leak of business card information stored without consent, as well as ransomware damage at Doosan Bobcat and claims of a 3.27 TB leak of internal data, were also confirmed, revealing both personal data management problems and concerns over leaks of corporate internal data. By type overall, personal data leaks (26) and hacking/intrusions (24) were the most numerous, with ransomware at 12. Overseas, among 62 new incidents, an attack on a Malaysian parking app disrupted services in 64 local governments, and damage occurred across various industries, including a leak of Nissan employee information and the exposure of personal and medical information on 1.26 million patients at MCBS in the United States.
By type
- Data breach25
- Hacking & intrusion23
- Ransomware11
- Malware3
Key incidents in South Korea
17,551 personal data records of Woori Bank NFT users leaked
17.6kImpact: 17,551 items of NFT users' personal information
17,551 items of personal information of Woori Bank NFT users, including nicknames and CI (connecting information) customer identifiers, were leaked. The cause was attributed to negligence by an employee of an outside development contractor, and Woori Bank said no spread or misuse of the information had been confirmed at the time. The Financial Supervisory Service demanded a self-inspection and the Personal Information Protection Commission launched an investigation.
Related reports: 56 · last report →Court awards damages over leak of business card data stored without consent
Impact: Leak of business card information
Business card information stored on a company server without consent was leaked. The court awarded 300,000 won in damages for emotional distress.
Read on 법률신문 ↗Doosan Bobcat faces alleged ransomware attack and internal data leak
Impact: Claimed leak of 3.27TB of internal data
Allegations emerged that Doosan Bobcat had been hit by ransomware. It was claimed that 3.27TB of internal data had been leaked, whilst whether damage actually occurred and the response have not been determined.
Read on 뉴스저널리즘 ↗
Supply-chain breaches
IBM accused of covering up multiple data breaches
A former cyber security executive came forward as a whistleblower, alleging that IBM covered up multiple data breaches. The timing of the breaches, the scale of the damage and IBM's response have not been confirmed.
Read on TechCrunch ↗
Also affected: 1
Key incidents in other countries
Phone of former MEP who probed spyware abuse hacked
Impact: Hacking of a former MEP's phone
An investigation revealed that the phone of a former Member of the European Parliament who had investigated spyware abuse was hacked with Pegasus spyware. Amnesty International used the case to criticise Europe's weak response to spyware.
Related reports: 10 · last report →Cyber-attack on Malaysian parking app disrupts 64 local councils
Impact: Disruption to parking app services in 64 local governments
Malaysia's Flexi Parking app was hit by a cyber-attack that disrupted parking services in 64 local governments. In Selangor, the issuing of parking fines was put on hold. On 2 July, digital parking systems in Selangor and Sabah were fully restored, after which there were calls for a transparent explanation of the attack.
Related reports: 7 · last report →Nissan employee data exposed in Oracle PeopleSoft hack
Impact: Employee information in several countries; number of people unknown
Nissan confirmed a breach of employee data linked to attacks targeting Oracle PeopleSoft. The attack was linked to the exploitation of a zero-day vulnerability, and damage spanning several countries was disclosed. Nissan disclosed the employee data breach on 29 June.
Related reports: 6 · last report →Attack on Malaysia's Flexi Parking disrupts parking payments
Impact: 64 local authorities affected and parking payments disrupted
Malaysia's Flexi Parking system was hit by a cyber-attack that affected 64 local authorities and disrupted parking payments. Selangor suspended parking enforcement during the outage, and Fahmi said he would consult the National Cyber Security Agency. The Flexi Parking and Smart Selangor Parking apps were restored on 2 July, but some users reported that their balances had disappeared.
Related reports: 6 · last report →US medical billing firm MCBS exposes data of 1.26 million patients
1.3mImpact: Personal and medical information of 1.26 million patients
US medical billing company MCBS was hacked, exposing the personal and medical information of 1.26 million patients. The incident was identified as a PEAR ransomware attack.
Related reports: 5 · last report →