Week 52, 2023 security incident report
Hacking and data breach incidents newly reported 2023.12.25 ~ 12.31
From December 25 to 31, 2023, one incident was recorded in South Korea, in which a tax accountant was punished for leaking client information through a photo posted as proof of working late, highlighting information exposure through work-related photos. Across South Korea and abroad, personal data leaks were the most common at 21, followed by 9 hacking/intrusion cases and 6 ransomware cases, and cascading damage from Kroll to FTX was also confirmed. Overseas, 35 incidents were recorded; among the incidents presented, the leak of personal data of about 2.39 million Integris Health patients was the largest by number of people affected, and data leaks also occurred in the healthcare, finance and food sectors, including information on about 1.32 million LoanCare borrowers and employee files at Yakult's Australian unit.
By type
- Data breach21
- Hacking & intrusion9
- Ransomware6
Key incidents in South Korea
Tax accountant punished for leaking client data in overtime proof photo
Impact: Client information leaked
A tax accountant leaked client information while posting a photo as proof of working overtime. The accountant received a suspended fine, and the timing of the leak and the scale of the damage have not been confirmed.
Read on YTN ↗
Supply-chain breaches
Fidelity National Financial attack exposes data of 1.3 million customers
1.3MImpact: Information of 1.3 million customers leaked and real estate transaction operations disrupted
U.S. title insurance and transaction services company Fidelity National Financial suffered a cyberattack in November 2023 and shut down some systems, disrupting real estate transaction operations. The attacker gained access using stolen credentials, and ALPHV/BlackCat claimed the attack. The company said the attack had been contained after a week-long outage, and later confirmed that information of 1.3 million customers had been leaked.
Related reports: 10 · last report →
Also affected: 1- LoanCareParent company breach exposes data of 1,316,938 LoanCare borrowersNames, addresses, Social Security numbers and loan numbers of 1,316,938 borrowers
Kroll cyber breach exposes FTX customer data
Impact: FTX customer information
A data breach at Kroll in August exposed FTX customer information. Kroll disclosed the exposure of the customer information in December 2023.
Read on Cybernews ↗
Also affected: 1- FTXKroll data breach exposes FTX customer informationFTX customer information
Key incidents in other countries
Personal data of about 2.39 million Integris Health patients leaked
2.4MImpact: Personal information of 2,385,646 patients
Integris Health in the US said a November 2023 breach exposed the personal information of 2,385,646 patients. The attackers stole names, dates of birth, contact details and Social Security numbers, among other data, and threatened patients with disclosure while demanding $50 in bitcoin. Patient care was not interrupted, and a class action lawsuit was filed after the incident.
Related reports: 8 · last report →National Amusements breach exposes personal data of 82,128 people
82.1KImpact: Personal information of 82,128 people
A breach at National Amusements in the US in December 2022 resulted in the theft of personal information of 82,128 people. The compromised data included bank and credit card information as well as passwords and security codes. The company disclosed the breach and notified those affected.
Related reports: 6 · last report →Ransomware attack halts some Ohio Lottery operations
The Ohio Lottery was hit by a ransomware attack that shut down some of its operations, though its gaming system continued to function. The attack was attributed to DragonForce ransomware, and the attackers claimed to have stolen employee and lottery player data.
Related reports: 6 · last report →First American cyberattack exposes personal data of 44,000 people
44KImpact: Personal information of 44,000 people
First American was hit by a cyberattack in December 2023 that leaked the personal information of 44,000 people. The company disclosed the scale of the damage in May 2024.
Related reports: 3 · last report →Yakult Australia cyber breach leaks employee files
Impact: Employee files leaked; 95GB of data accessed according to the attackers' claims
Yakult Australia confirmed a cyber breach after a 95GB data leak became known. The attackers claimed to have accessed 95GB of data, and employee files were leaked on the dark web. DragonForce was named as being behind the attack.
Related reports: 3 · last report →