Week 10, 2024 security incident report
Hacking and data breach incidents newly reported 2024.03.04 ~ 03.10
In South Korea, the most prominent incident was the hacking of the official YouTube channels of Starship Entertainment and its artists, including IVE, Monsta X and Cravity, in which channel names were changed and existing videos were made private. The leak of design drawings and on-site photos from a South Korean semiconductor equipment maker following a North Korean hack and the leak of material related to a navy destroyer program were also major incidents, as intrusions into entertainment channels and leaks of industrial and defense material occurred together. In the tally by type combining 6 incidents in South Korea and 44 overseas, personal data leaks were the most common at 29, followed by 11 ransomware cases and 10 hacking/intrusion cases. Overseas, ransomware damage at the City of Hamilton in Canada disrupted administrative services and benefit payments, and damage occurred across various industries, including a personal data leak at Capita, service disruptions at FINTRAC and disruptions to beer production at Duvel.
By type
- Data breach29
- Ransomware11
- Hacking & intrusion8
Key incidents in South Korea
YouTube channels of Starship Entertainment and its artists hacked
Impact: Official YouTube channels of the agency and of IVE, MONSTA X, CRAVITY and others renamed, with existing videos set to private
On March 4, 2024, the official YouTube channels of Starship Entertainment and artists including IVE, MONSTA X and CRAVITY were hacked. The channel names were changed and existing videos were set to private, making them unplayable. The agency said it was working with YouTube on recovery.
Related reports: 5 · last report →Official YouTube channels of IVE, MONSTA X and CRAVITY hacked
Impact: Official YouTube channels of IVE, MONSTA X and CRAVITY compromised
The official YouTube channels of IVE, MONSTA X and CRAVITY were hacked. The IVE and MONSTA X channels were renamed SpaceX. Elon Musk appeared on the hacked IVE account.
Related reports: 3 · last report →North Korean hackers steal design drawings from South Korean chip equipment makers
Impact: Semiconductor design drawings and on-site photos
North Korea hacked the servers of South Korean semiconductor equipment makers and stole design drawings and on-site photos. The National Intelligence Service (NIS) disclosed in March 2024 that North Korea had hacked the servers of South Korean semiconductor equipment makers.
Related reports: 3 · last report →Human rights commission rules disclosure of individual's audit documents violated privacy
The National Human Rights Commission of Korea ruled that disclosing a specific individual's audit documents infringed on the right to privacy. The agency that disclosed the documents, the timing of the disclosure and the specific scope of harm have not been confirmed.
Read on 매일노동뉴스 ↗Suspicions of personal data leaks raised over AliExpress and Temu
Suspicions of personal data leaks and the sale of counterfeit goods were raised over Chinese shopping apps AliExpress and Temu. Whether personal data was actually leaked, the extent of the damage, and response measures have not been confirmed.
Read on 한국경제 ↗Hanwha Ocean condemns leak of navy destroyer program materials
Impact: Materials related to a navy destroyer program
Materials related to a navy destroyer program were leaked. Hanwha Ocean condemned the leak of the materials.
Read on Aju Press ↗
Supply-chain breaches
HWL Ebsworth hack affects Australian government agencies
Impact: Government agencies affected, including the Reserve Bank of Australia, the Australian Federal Police and Australia Post
Australian government agencies were affected by the hack of law firm HWL Ebsworth. The affected agencies included the Reserve Bank of Australia, the Australian Federal Police and Australia Post, and a full list of affected government agencies was released.
Related reports: 2 →
Key incidents in other countries
Ransomware Attack Paralyzes Services in Hamilton, Canada
Impact: Paralyzed municipal services, disrupted overtime pay, and incident-related costs of 7.4 million Canadian dollars
The City of Hamilton, Canada, was hit by a ransomware attack in February 2024 that paralyzed municipal services and disrupted overtime pay for employees. The city decided not to pay the ransom, and incident-related costs reached 7.4 million Canadian dollars by August 2024. It later emerged that the city had known about serious cybersecurity weaknesses for years before the attack.
Related reports: 12 · last report →Capita ransomware attack leaks personal data
Impact: Personal data leaked
Capita was hit by a ransomware attack in 2023, resulting in a personal data breach. The cyberattack contributed to the company's annual loss of more than £106 million. Later, 8,000 people filed lawsuits, and a £14 million penalty was imposed over security shortcomings.
Related reports: 8 · last report →Canada's financial intelligence agency takes systems offline after cyberattack
Impact: Systems taken offline
The Financial Transactions and Reports Analysis Centre of Canada was hit by a cyberattack. The agency took its systems offline in response to the attack.
Related reports: 7 · last report →Ransomware attack disrupts production at Belgian brewer Duvel
Impact: Beer production disrupted
Belgian brewer Duvel was hit by a ransomware attack that disrupted beer production. The company said it had sufficient beer in stock. The ransomware group Stormous claimed responsibility for the attack.
Related reports: 4 · last report →Names and addresses leaked from Jersey financial services regulator
Impact: Names and addresses leaked
A data leak at the Jersey Financial Services Commission exposed names and addresses. The number of people affected, the timing, the cause, and the response have not been confirmed.
Related reports: 4 · last report →