Week 1, 2024 security incident report

Ozys's Orbit Bridge hacked, about 100 billion won in crypto assets stolen

Impact: About 100 billion won in crypto assets

Ozys's Orbit Bridge was hacked at the start of 2024, and about 100 billion won worth of crypto assets were stolen. Ozys found that its former chief information security officer had arbitrarily changed firewall policies and requested an investigation into possible insider involvement, but whether that person committed the crime has not been determined. The company announced a plan to recover user losses, which was followed by the termination of trading support for Orbit Chain and a court ruling recognizing its liability for damages from the hack.

Joo Jin-mo's phone hacked, private conversations leaked

Impact: Leak of Joo Jin-mo's private KakaoTalk conversations

Actor Joo Jin-mo's mobile phone was hacked, and KakaoTalk conversations containing details of his private life were leaked. On a broadcast in January 2024, Joo said his wife had been a great source of strength during the difficult period of the hacking controversy.

Orbit Chain hack sees $81 million in crypto assets stolen

Impact: $81 million in crypto assets

$81 million in crypto assets was stolen from Orbit Chain in a hack, prompting an investigation by the Korean National Police Agency. As of January 2, 2024, the stolen funds were reported not to have moved. Orbit Chain later notified the hacker of a deadline for negotiations.

Alleged Steam account hacking at PC bangs rebutted by diskless system providers

Controversy arose over unfair Discord usage restrictions and Steam account hacking related to the use of PC bangs (internet cafés). Diskless system providers rebutted the rumors of Steam account hacking at PC bangs as groundless.

Bank of Korea website hit by DDoS attack on New Year's Day

The Bank of Korea website came under a DDoS attack on January 1, 2024. It was the first DDoS attack on the Bank of Korea website in four years.

Incheon city's online newspaper i-View hacked, data leak suspected

110KImpact: Suspected leak of information of 110,000 subscribers

i-View, the online newspaper of Incheon Metropolitan City, was hacked. The information of 110,000 subscribers is suspected to have been leaked, and whether the leak has been confirmed and what response has been taken remain unverified.

Personal data of 33,869 presumed The Zone Housing customers leaked

33.9KImpact: Personal information of 33,869 people presumed to be The Zone Housing customers

Personal information of 33,869 people, believed to be customer data of The Zone Housing, was leaked via Telegram. How the leak originally occurred, when it happened and the specific response have not been confirmed.

Dating course app DatePop hacked, personal data leaked

Personal information was leaked from the dating course app DatePop in a hack. The scale of the leak, the date and the specific response have not been confirmed.

Anonymous BD launches DDoS attack on South Korea's foreign ministry over support for Israel

South Korea's Ministry of Foreign Affairs was hit by a DDoS attack by Anonymous BD. Support for Israel was given as the reason for the attack, and the specific extent of the damage and the response have not been confirmed.

loanDepot ransomware exposes personal data of about 16.9 million people

16.9MImpact: Names, contact details, dates of birth, Social Security numbers, financial account numbers and more of about 16.9 million people

US mortgage lender loanDepot was hit by a ransomware attack in January 2024 that disrupted its IT systems and payment portal. Names, contact details, dates of birth, Social Security numbers, financial account numbers and other data of about 16.9 million people were stolen. ALPHV claimed responsibility for the attack, and in March 2025 a $25 million class action settlement was reached.

Hijacked Mandiant X account used to promote crypto scam

Impact: X account hijacked and used to promote a cryptocurrency scam

The X account of security firm Mandiant was hijacked and used to promote a cryptocurrency scam. The attack used password brute-forcing, and two-factor authentication was not enabled on the account. Mandiant later disclosed how the account was compromised.

Beirut airport screens in Lebanon hacked to display anti-Hezbollah message

Impact: Anti-Hezbollah message displayed on airport screens

Screens at Beirut airport in Lebanon were hacked to display an anti-Hezbollah message. A cyberattack targeting the airport screens took place, and the specific intrusion route and response measures have not been confirmed.

Cyberattack on Victoria's court system in Australia exposes hearing recordings

Impact: Court hearing recordings exposed

The court system in Victoria, Australia, was hit by a cyberattack suspected to be ransomware, exposing recordings of court hearings. The possible involvement of Russian hackers was raised, but the attacker has not been confirmed.

Ransomware attack on museum software service halts online collection access

Impact: Museum online collection and digital archive services halted

In late December 2023, a provider of software services for museums suffered a cyberattack, halting access to museums' online collections. Software used by hundreds of museums was taken offline by a ransomware attack, also affecting digital collection and archive services at U.S. museums.