Week 47, 2023 security incident report

North Korea's Kimsuky steals 1,468 email accounts via impersonation phishing

1.5KImpact: Email accounts of 1,468 South Koreans

North Korean hacking group Kimsuky stole the email accounts of 1,468 South Koreans through phishing that impersonated government agencies, media outlets and others. The victims included 57 current and former public officials, foreign affairs and security experts and others. The attacks used 576 relay servers, including 194 in South Korea, and fake portals, and unauthorized access to cryptocurrency exchanges was also attempted.

Data recovery firm colluded with hackers, collected 2.6 billion won in ransomware recovery fees

Impact: 2.6 billion won collected as recovery fees

A data recovery firm colluded with hackers to spread ransomware and pocketed 2.6 billion won under the pretext of recovery fees. In December 2023, the firm, linked to North Korean hackers, claimed there had been no extortion and applied for bail.

67 million personal data records leaked from Yanolja, Interpark and Zigzag over 3 years

67MImpact: 67 million personal information records over 3 years

67 million records of personal information were leaked from Yanolja, Interpark and Zigzag over 3 years. The leaked information also included shared building entrance passcodes.

Unauthorized logins on SK Stoa app raise fears of data leak affecting about 125,000

125KImpact: Possible leak of personal information of about 125,000 people

Unauthorized login attempts occurred on the SK Stoa app. This raised concerns that the personal information of about 125,000 people may have been leaked.

Galaxia Moneytree hit by hacking

Galaxia Moneytree suffered a hacking incident. The specific scale of the damage, the date of the incident and the response have not been confirmed.

Idus fined 227.89 million won over personal data leak

A personal data leak occurred at Idus. A fine of 227.89 million won was imposed in connection with the leak.

Tumblbug operator Backpackr hacked, personal data leaked

Personal information was leaked in a hack at Backpackr, the operator of Tumblbug. A fine was imposed in connection with the leak.

KT Skylife customers implicated in identity theft crimes amid personal data leak concerns

Concerns were raised that KT Skylife customers were being wrongly accused as identity theft criminals. The issue of a leak of customers' personal information was also raised.

Enterprise software company TmaxSoft leaks 2TB of data

Impact: 2TB of data

Data was leaked from enterprise software provider TmaxSoft. The leak amounted to 2TB, and specific response measures have not been confirmed.

Intrusion via shared authentication system leaks LINE Yahoo personal data

510KImpact: About 510,000 cases of personal information

Unauthorized access to LINE Yahoo's internal systems led to a leak of personal information. The attack began with a malware infection on a PC belonging to an employee of a NAVER Cloud subcontractor and proceeded through a shared authentication system. The scale of the leak was initially reported at about 400,000 cases and later at 510,000, and the LINE Yahoo president apologized.

Fidelity National Financial attack exposes data of 1.3 million customers

1.3MImpact: Information of 1.3 million customers leaked and real estate transaction operations disrupted

U.S. title insurance and transaction services company Fidelity National Financial suffered a cyberattack in November 2023 and shut down some systems, disrupting real estate transaction operations. The attacker gained access using stolen credentials, and ALPHV/BlackCat claimed the attack. The company said the attack had been contained after a week-long outage, and later confirmed that information of 1.3 million customers had been leaked.

Taj Hotels data of 1.5 million customers possibly exposed

1.5MImpact: Possible exposure of information on 1.5 million customers

A data breach occurred at Taj Hotels, raising the possibility that the information of 1.5 million customers was exposed. The actual scale of the leak and the response have not been confirmed.

Australian telecom Optus's 2022 data breach

Data was leaked at Australian telecom operator Optus in a 2022 cyberattack. Australia's telecommunications regulator and privacy regulator subsequently each filed lawsuits. Optus disputed the telecommunications regulator's claims about the sophistication of the attack.

Authorities investigate hack of US water authority in Aliquippa

The Municipal Water Authority of Aliquippa in Pennsylvania was hit by a cyberattack. CyberAv3ngers, a hacker group described as Iranian-backed or pro-Iranian, was named as being behind the attack. Authorities launched an investigation, and Pennsylvania lawmakers called for a US Department of Justice investigation.