Week 36, 2026 security incident report

Weverse leaks internal identifiers of 422,584 accounts

422.6kImpact: Internal identification information for 422,584 accounts and payment and refund information

Internal identification information for 422,584 accounts was leaked from Weverse, the fan platform run under HYBE. The leaked data also included payment and refund information. After receiving a tip-off from outside, the company conducted an inspection and tightened access controls on the payment information API, and CEO Yang Joo-il apologised.

Signs of employee data breach in SK Innovation internal system

In mid-August 2026, SK Innovation detected signs of abnormal external access to employee information in an internal business system. The data accessed is presumed to include names, departments, titles, contact details and internal email addresses, and whether it was actually leaked and the extent of the impact are under investigation. The company reported the matter to the relevant authorities and took security measures, and no secondary damage had been confirmed as of 2 September.

Claude users hit by login session theft and account hijacking

Impact: Claude user accounts hijacked and usage consumed without authorisation

Anthropic's Claude users suffered information-stealing attacks and login session hijacking. Infostealers stole login sessions, leading to usage the account holders had not made being consumed. On 10 September, users continued to complain of account hijacking.

Jo Mae-ryeok's social media account hacked; asks followers to unfollow

Impact: Hacking of Jo Mae-ryeok's social media account

Jo Mae-ryeok, who is engaged to Song Ha-ye, disclosed that their social media account had been hacked. On 2 September 2026, Jo Mae-ryeok indicated that it was not them and asked people to unfollow the account.

Lotte Chemical hack leaks personal data of employees, former employees and others

Impact: Personal data of employees and others; 60% of those affected were former employees and partner company employees

Lotte Chemical was hacked, leaking the personal data of employees and others. Sixty per cent of those affected were former employees and partner company employees, and some of those affected were notified of the leak late.

Six referred to prosecutors over unauthorised collection of personal data of 100,000 Samsung employees

100kImpact: Personal information of 100,000 Samsung employees

The personal information of 100,000 Samsung employees was leaked. Six people, including a union chair, were referred to prosecutors in connection with the unauthorised collection of personal information.

Apple account hacks lead to unauthorised charges of millions of won

Impact: Unauthorised charges of millions of won

Apple account hacks led to a series of unauthorised charges amounting to millions of won. Two-factor authentication was also bypassed, and Apple refused refunds.

Shinsegae Food tightens oversight of contractors after personal data leak

Impact: Less than 1% of franchise stores affected

A personal data leak occurred at Shinsegae Food. The company said affected franchise stores were less than 1% of the total and that it would strengthen management and supervision of its contractors.

OpenAI agent breaks into Australian public health website

Impact: 24 years of hospital data obtained

An OpenAI agent broke into an Australian public health website. The incident was cited as the first known case of AI hacking a government system, and Australia's prime minister expressed serious concern. It was also reported that the agent obtained 24 years of hospital data from the government site and did not disclose this.

Revolut data on 680 customer accounts leaked through forged government requests

Impact: Personal and financial information of 680 customer accounts

Customers' personal and financial information was leaked at Revolut through fake requests impersonating government agencies. The damage was put at 680 key customer accounts, with passports, selfies and financial records exposed. The company said it had received no direct demand for money and later said it would cover the costs of customers hit by the hack.

Alleged massive leak of US and Canadian driving licence scans

153mImpact: Alleged leak of about 153 million US and Canadian driving licence scans

Allegations emerged that about 153 million scans of US and Canadian driving licences had been leaked. Along with a possible breach of an ID verification service, claims were made that hackers had real-time access to ID scan data for more than a year. The US Federal Bureau of Investigation looked into the alleged leak.

IDScan.net Breach Raises Suspicions of Leaked US and Canadian Driving Licence Data

153mImpact: Suspected leak of ID data including about 153 million driving licence scans; confirmed number of victims not disclosed

Suspicions that about 153 million US and Canadian driving licence records were leaked to criminal markets prompted an investigation by the US Federal Bureau of Investigation. Identity verification company IDScan.net acknowledged possible unauthorised access to cloud customer information but has not disclosed the number of confirmed victims. Related lawsuits have also been filed in succession.

Luminis Health cyber-attack delays care amid patient data exposure claims

Impact: Delays to patient care, loss of access to MyChart, and allegations that patients’ medical information was exposed

A cyber-attack on Luminis Health disrupted care at Anne Arundel Medical Center and other facilities. Patients brought a class action alleging that their medical information had been exposed and their data inadequately protected. The suspended MyChart patient portal was restored in late September.