Week 34, 2026 security incident report

Private certification body hack leaks personal data of Cheong Wa Dae figures

Impact: Personal information of key Cheong Wa Dae figures and others

Around February 2026, the servers of a private certification body in South Korea's defence and aviation sector were hacked. The stolen material included personal information believed to be business card details of key Cheong Wa Dae figures. Police said the incident was not a hack of Cheong Wa Dae's own servers and investigated the leak route and any additional damage.

Jungsang Language Institute leaks about 260,000 member personal data records

260kImpact: About 260,000 records of member personal information

Jungsang Language Institute detected abnormal bulk external access to member information on 17 August and confirmed a personal data leak on the 18th. The reported scale of the leak is about 260,000 records, including names, dates of birth, contact details, addresses, schools, grades, user IDs and encrypted passwords. The institute reported the incident to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and requested an investigation.

Hacker claims to have stolen and be selling 47.9 million records from South Korean delivery platform

47.9mImpact: Claimed theft of 47.9 million records

A hacker claimed to have stolen 47.9 million records from a South Korean delivery platform and offered them for sale. The data allegedly stolen includes resident registration numbers, bank accounts and building entrance passcodes, but the claimed scale and the authenticity of the data need verification. On 21 August it was reported that this information had been leaked through a delivery app hack.

Solmoro Country Club hack leaks six categories of customer personal data

Impact: Six categories of customer personal information

Customer personal information was leaked in a hack at Solmoro Country Club. The club said six categories of personal information were leaked and that it reported the incident immediately, and an investigation is under way.

Ashleywood steals another 100,000 records from plastic surgery clinics

100kImpact: 100,000 records of personal information

Ashleywood stole an additional 100,000 records of personal information from plastic surgery clinics. Ashleywood also hacked 21 sites in South Korea in 2025. The names of the affected clinics and the response have not been confirmed.

Hacking attacks on South Korean law firms continue

South Korean law firms suffered a series of hacking attacks. Small and mid-sized law firms are effectively defenceless against hacking.

Geto hit by DDoS attack, two-hour outage at peak hours

Impact: Two-hour outage of Geto's service

Geto was hit by a DDoS attack during peak hours. The attack caused a two-hour outage.

Personal data leak recurs at NHN Commerce's Godomall

Impact: Personal data leak

Personal information was leaked from NHN Commerce's Godomall. The leak recurred just six months after the company was sanctioned by the Personal Information Protection Commission (PIPC).

Berlin government hack leads to cut-off of ministries and data leak

Impact: Two state government departments disconnected from the network; sensitive information related to military, defence and power generation facilities leaked

A security breach at the Berlin government in Germany led to two state government departments being disconnected from the government network. A ransomware group claimed to have stolen Berlin data and put it up for auction. Sensitive security information related to German military, defence and power generation facilities was later published on the dark web.

Apollo Global Management hack leaks personal data

Impact: Personal information of clients and shareholders, and Social Security numbers

Apollo Global Management was hit by a social engineering attack in July 2026, leading to a leak of personal information. The leaked data included client and shareholder information and Social Security numbers, and the company disclosed the breach in August. A lawsuit over the leak of shareholder information was later filed.

UK power station cyber-attack halts operations for four days

Impact: Power station shut down for four days

A small power station in the United Kingdom was hit by a cyber-attack and shut down for four days. The damage became known from 23 August 2026, and an Iran-linked hacking group was named as behind the attack. The name of the affected station and the specific recovery measures have not been confirmed.

University of Texas at San Antonio delays start of classes after intrusion attempt

Impact: Some IT services taken offline and autumn semester start delayed

The University of Texas at San Antonio in the United States took some IT services offline in response to an unauthorised access attempt and delayed the start of the autumn semester to 24 August 2026. The university said it blocked the access before it reached core systems and that there was no evidence of data being accessed or stolen. The university began the semester on 24 August, welcoming students.

Turner Construction breach affects 70,000 people, exposing financial information

70kImpact: Breach affecting 70,000 people; Social Security numbers, payroll and bank account information exposed

A data breach affecting 70,000 people occurred at Turner Construction, exposing Social Security numbers. The company also disclosed that payroll information and bank account information were leaked, and it was raised that military-related files may have been included. Lawyers have begun investigating the breach, but when it occurred and the specific recovery measures have not been confirmed.