Week 28, 2026 security incident report
Hacking and data breach incidents newly reported 2026.07.06 ~ 07.12
From 6 to 12 July, five new cybersecurity incidents were recorded in South Korea, with the leak of Nike customers' personal data the most reported with five articles. Data leaks in retail and healthcare stood out, as a hack of Cresoty's prescription recognition system leaked personal data on pharmacists and patients and a fake payment page at an online shop stole some 5,700 card records, while LS Securities suffered financial losses as billions of won were withdrawn through orders linked to hacked emails. Across all types in South Korea and abroad, personal data leaks were the most common at 30, followed by hacking/intrusions at 16 and ransomware at 10. Overseas, major reported incidents included Accenture's confirmation of a breach and the attackers' claims of stealing source code and other data, a customer data leak at Lidl following a hack of an external IT service provider, and ransomware damage at Mount Royal University, along with large-scale personal data leaks affecting about 7 million people at AssuranceAmerica and about 4.12 million at AdaptHealth.
By type
- Data breach29
- Hacking & intrusion15
- Ransomware10
- Phishing & smishing3
- Malware1
Key incidents in South Korea
Nike customer data leaked; company tightens security
Nike customers' personal information was leaked, and the attackers claimed to have stolen millions of customer records. Researchers raised the possibility that the data leaked from a third party. Nike strengthened its security measures and offered affected customers one year of dark web security monitoring.
Related reports: 5 · last report →Hack of Cresoty prescription recognition system leaks personal data
Impact: Personal data of pharmacists and patients leaked
The prescription recognition system of Cresoty, a pharmaceutical purchasing and payment service company, was hacked, leaking the personal data of pharmacists and patients. Cresoty said sensitive medical information such as disease codes was not compromised.
Related reports: 3 · last report →Billions of won withdrawn via orders tied to hacked email at LS Securities
Impact: Withdrawal of billions of won
At LS Securities, billions of won were withdrawn in connection with orders placed through a hacked email, and police opened an investigation. The Financial Supervisory Service used the incident to order securities firms to strengthen email security.
Related reports: 2 · last report →Park Bom claims her songs are being stolen through hacking
Park Bom claimed in July that her songs were being stolen through hacking. In August, about a month after claiming to be a hacking victim, she shared an update on how she is doing.
Related reports: 2 · last report →Fake payment pages on online shops steal more than 5,700 card records
5.7kImpact: More than 5,700 card records
More than 5,700 card records were stolen through fake payment windows inserted into some South Korean online shopping sites. The attackers induced users to enter not only card numbers, expiry dates and CVCs but also their full card PINs and resident registration numbers. The Financial Supervisory Service issued an alert about card data theft at online shopping sites.
Read on 뉴스21통신 ↗
Key incidents in other countries
Accenture confirms breach as attacker claims theft of source code and more
After an attacker claimed to have stolen 35GB of Accenture data including source code and put it up for sale, the company confirmed a breach. Accenture said it had addressed the cause of the breach and that operations and service delivery were not affected. It is unclear whether the scale of theft claimed by the attacker has been verified.
Related reports: 14 · last report →Ransomware attack on Mount Royal University leaks student and staff data
Impact: Student and staff data stolen and deleted
Mount Royal University was hit by a cyber-attack in June 2026, in which student and staff data was stolen and deleted. The university confirmed the ransomware attack and data breach and continued its investigation in July.
Related reports: 10 · last report →Lidl online customer data leaked in hack of external IT service provider
Impact: Personal data of online store customers
Personal data of customers of Lidl's online stores in Europe was stolen in a hack of an external IT service provider. Lidl notified customers of the data leak and urged caution.
Related reports: 10 · last report →AdaptHealth social engineering attack leaks patient data
4.1mImpact: Data of 4,115,802 people leaked
AdaptHealth disclosed on 6 July that patient information had been exposed in a cyber-attack in June. The number of people affected was put at 4,115,802. The company said hackers had exfiltrated patient information through a social engineering attack, and it investigated the breach.
Related reports: 7 · last report →AssuranceAmerica leaks personal data of about 7 million drivers
7mImpact: Personal data of 6,998,886 people, including driving licence numbers
The systems of US motor insurer AssuranceAmerica were breached, exposing the information of 6,998,886 people. The stolen files included names, contact details, and information on insurance policies, vehicles and claims, as well as driving licence numbers.
Related reports: 6 · last report →