Week 7, 2024 security incident report

From February 12 to 18, 2024, six new cybersecurity incidents were recorded in South Korea, with a suspected unauthorized access to an Office 365 administrator account at the Incheon Metropolitan City Office of Education, raising concerns over the leak of personal data of about 110,000 people, standing out. Account compromise emerged as a key trend, as an email hack linked to the presidential office leaked sensitive information such as the president's schedule and materials on overseas trips, and the theft of 8 million passwords by abusing browser auto-login spread. At PlayDapp, the hijacking of administrator privileges led to the unauthorized issuance of a total of 1.79 billion PLA tokens, as damage from account and privilege takeovers extended to crypto assets. Overseas, 47 new incidents were recorded, with damage in the public and healthcare sectors standing out, including the leak of some 210,000 records from the Philippines' Department of Education and a ransomware attack on a Romanian healthcare platform that encrypted data at 26 hospitals and led a further 74 medical facilities to cut off internet access as a precaution.