Week 9, 2024 security incident report
Hacking and data breach incidents newly reported 2024.02.26 ~ 03.03
From February 26 to March 3, 2024, the incident that drew the most attention in South Korea was a DDoS attack targeting the LCK that delayed and halted matches and disrupted live broadcasts. At Something, the theft of 730 million SSX tokens worth about 18 billion won was followed by the end of trading support, and an indictment over the leak of information on 39,000 patients and North Korea's theft of SLBM underwater launch technology were also covered. Personal data leaks (24) and hacking/intrusion cases (18) accounted for most incident types, and in South Korea the patterns varied from disruptions to service operations to damage involving crypto assets, medical information and military technology. Overseas, ransomware at UnitedHealth compromised the information of 192.7 million people and disrupted prescription drug orders, medical billing and payments, and leaks of patient information at Cencora and of card information via a third-party vendor at American Express also occurred.
By type
- Data breach22
- Hacking & intrusion18
- Ransomware6
- DDoS2
- Phishing & smishing1
Key incidents in South Korea
DDoS attacks halt LCK matches and disrupt broadcasts
Impact: Match delays and suspensions, and disrupted live broadcasts
In February 2024, DDoS attacks disrupted player connections and broadcasts in the LCK, causing matches to be delayed or suspended. The league responded with private pre-recorded broadcasts and matches without spectators, and in March it introduced offline game servers at LoL Park to bring the league back to normal.
Related reports: 18 · last report →DDoS attacks delay and halt LCK matches
Impact: Server paralysis and match delays and suspensions
The League of Legends Champions Korea was hit by DDoS attacks that paralyzed its servers, delaying or halting matches. Fans expressed concern about the league's management and the possibility of recurrence, and T1's Lee Sang-hyeok expressed regret that fans could not properly enjoy the matches.
Related reports: 8 · last report →730 million Somesing tokens stolen, trading support ended
Impact: 730 million SSX tokens, worth about 18 billion won
On January 27, 2024, Somesing had 730 million SSX tokens worth about 18 billion won stolen in a hack. An excess circulation problem relative to the planned supply then arose, and the token was designated for investment caution over security issues. As the excess circulation volume, business sustainability and investor protection issues were not resolved, South Korean exchanges decided to end trading support.
Related reports: 3 · last report →Employees and corporations indicted without detention over leak of 39,000 patients' data
39KImpact: Information of 39,000 patients leaked
Pharmaceutical company employees and related corporations were indicted without detention over a case in which the information of 39,000 patients was leaked. Those indicted included a university hospital and a pharmaceutical corporation.
Related reports: 2 →North Korea steals SLBM underwater launch technology by hacking South Korea
Impact: Theft of SLBM underwater launch technology
It was reported that North Korea had hacked South Korea and stolen underwater launch technology for submarine-launched ballistic missiles. The specific affected organizations and when the theft occurred have not been confirmed.
Read on 자유일보 ↗
Supply-chain breaches
Cigna also affected by Prospect Medical's 2023 data breach
Impact: Insurers including Cigna affected
Cigna was added to the list of insurers affected by Prospect Medical's 2023 data breach. The specific information exposed and the extent of the damage have not been confirmed.
Related reports: 2 · last report →
Also affected: 2
Key incidents in other countries
UnitedHealth ransomware attack disrupts healthcare services, causes massive breach
192.7MImpact: Data breach affecting 192.7 million people and disruption of prescription ordering and medical billing and payment services
In February 2024, UnitedHealth's technology unit was hit by a BlackCat ransomware attack, disrupting prescription ordering and medical billing and payment services. UnitedHealth worked to restore services and provided limited financial assistance to healthcare providers. The number of people later confirmed affected by the data breach rose to 192.7 million, and lawsuits by healthcare providers and patients followed.
Related reports: 34 · last report →American Express customer card data leaked via third-party vendor
Impact: Customer names, credit card numbers and expiration dates
American Express customers' names, credit card numbers and expiration dates were leaked through a hack of a third-party payment processor. American Express warned customers about the data breach at the third-party vendor.
Related reports: 17 · last report →Cencora cyberattack steals US patients' health information
Impact: Theft of US patient information linked to 11 pharmaceutical companies; $75 million ransom paid
Cencora had data stolen from its internal information systems in a cyberattack in February 2024. The leaked information included data on US patients linked to 11 pharmaceutical companies, and the company notified victims and disclosed that additional data had been stolen. It later emerged that a $75 million ransom had been paid for the attack and that a $40 million data breach lawsuit settlement had been reached.
Related reports: 12 · last report →Epic Games denies evidence of claimed theft of 189GB including customer data
Impact: Claimed theft of 189GB including customer data and source code; company denies evidence
The hacking group Mogilevich claimed it had hacked Epic Games and stolen 189GB of data, including customer information and source code. The claim also included login credentials and payment information. Epic Games said there was no evidence supporting the hack.
Related reports: 11 · last report →Hacked Vastaamo psychotherapy records leaked, victims extorted
Impact: Psychotherapy records leaked and published; victims extorted
Vastaamo's psychotherapy records were stolen in a hack and published, and the leaked records were used to extort victims. A lawyer for the victims said some victims took their own lives after the leak. The hacker was sentenced to prison, and thousands of victims demanded higher compensation.
Related reports: 6 · last report →