Week 32, 2026 security incident report

More than 460,000 personal data records leaked from 3Pro TV app

460kImpact: More than 460,000 personal data records, card information exposed for 317 people

In August 2026, it was disclosed that more than 460,000 records of personal information, including names, contact details and addresses, had been leaked from the 3Pro TV app. Some account and card information was also included, and the number of people whose card information was exposed was put at 317. The operator, E Broadcasting, apologised, blocked the IP addresses involved and reported the incident to the authorities.

Personal data of 17,088 members of Democratic Party's Blue Wave community leaked

17.1kImpact: Personal information of 17,088 Blue Wave members

Names, usernames, encrypted passwords, email addresses and other data of 17,088 members of the Democratic Party of Korea's party member community Blue Wave were leaked through hacking. The leak is believed to have occurred in September 2025, and the party became aware of the incident on 6 August 2026 through an outside tip. Party officials expressed apologies and willingness to cooperate with the investigation, and the service was temporarily shut down on 11 August for a security check.

Actor Lee Joon-hyuk's social media account hacked, recovery under way

Impact: Actor Lee Joon-hyuk's social media account

Actor Lee Joon-hyuk's social media account was hacked. His agency said the account's posts and direct messages do not reflect the actor's intentions and that it is working to recover the account. It urged fans not to click on messages to avoid financial losses.

IITP leaks personal data during security work

Impact: Personal information of users of five systems

During security reinforcement work at the Institute of Information & Communications Technology Planning & Evaluation, a firewall misconfiguration opened an external port and personal information was leaked. Damage to users of five systems, including researcher information, was confirmed. Ryu Je-myung, Second Vice Minister of Science and ICT, apologised for the successive leaks and said measures to prevent recurrence would be sought.

Personal data leak and ransom demand at well-known Daechi-dong maths academy

Impact: Personal information and addresses of academy users

Parents claimed that personal information had been leaked from a well-known maths academy in Daechi-dong, and that addresses of users who had only taken a level test were also leaked. The leak was reported to have occurred at an academy with about 50 branches, and the hacker also demanded money.

Data recovery firm CEO colluded with ransomware hackers to solicit victims

The head of a data recovery company colluded with ransomware hackers to solicit business from victims. The chief executive was sentenced to three years in prison at first instance.

Claim of 12.53 million Zigzag member records leaked; company denies

12.5mImpact: Claimed leak of 12.53 million member records; company denies the data is its own

A claim was made that 12.53 million Zigzag member records had been leaked. Zigzag said the data is not its own.

Possible compensation claims raised over Meloming data leak

Personal data was leaked from Meloming. A lawyer expressed the view that each victim could claim 300,000 won in compensation, as in the Coupang and SK Telecom cases.

Researchers' personal data leaked from national R&D agency managing 1.9 trillion won

Impact: Leak of researchers' personal data

A national R&D agency managing 1.9 trillion won was hacked, and researchers' personal data was leaked. The name of the affected agency, the number of people affected and the response have not been confirmed.

Cyber-attack on North Carolina Ports Authority delays operations

Impact: Disruption to operations and cargo handling at the Port of Wilmington, Port of Morehead City and Charlotte inland terminal

The North Carolina Ports Authority in the United States was hit by a cyber-attack, causing IT system outages and port operation delays. The Port of Wilmington, the Port of Morehead City and the Charlotte inland terminal were affected, and the authority confirmed the attack.

CEVA Logistics cyber-attack leaks European customer information

Impact: Disruption at European warehouses and information leak affecting retailers, banks and Steam users

CEVA Logistics suffered a cyber-attack, resulting in a data leak and operational disruption. European warehouses and client companies were affected, and the fallout spread to retailers, banks and Steam users. The specific scale of the leak, the attack method and the recovery measures have not been confirmed.

Beacon CRM breach leaks personal data from more than 1,000 UK charities

Impact: Personal data linked to more than 1,000 UK charities

A data breach at Beacon CRM leaked personal information from more than 1,000 UK charities. An exposed AWS access key was identified as being linked to the breach, and it was suggested that the key may have been exposed in JavaScript. On 7 August the UK government published response guidance for affected charities.

Ransomware attack hits Coweta, US, across city computer systems

Impact: Damage across the city's computer systems

The City of Coweta, Oklahoma, was hit by a ransomware attack across its computer systems. The city refused to pay the ransom and worked to recover some documents.

Social engineering attack on Levi Strauss employees leads to corporate data theft

Impact: Theft of corporate data stored on employee computers

Corporate data was stolen from Levi Strauss in a social engineering attack targeting three employees. The attacker extracted data stored on the employees' computers. The company said its swift response prevented a breach of consumer data.