Week 15, 2024 security incident report
Hacking and data breach incidents newly reported 2024.04.08 ~ 04.14
From April 8 to 14, five new incidents were recorded in South Korea, with the hack of iTooza that leaked some 130,000 personal records cited as a major incident with a stated scale of damage. Investigations continued into leaks of sensitive material, including the leak of confirmation hearing materials on Han Dong-hoon and alleged leaks of prosecution investigation information, and retaliatory hacking of South Korean websites following reports of an attempted leak of KF-21 material, as well as fraud impersonating an investment group, also emerged. Of the 25 incidents in total, personal data leaks were the most common at 9, followed by 8 hacking/intrusion cases and 6 ransomware cases. Overseas, large-scale damage occurred, including the compromise of 576,000 Roku accounts and the theft of information on about 533,000 people at a Wisconsin insurer, and a data leak following a ransomware attack on semiconductor company Nexperia was also counted as a major incident.
By type
- Data breach9
- Hacking & intrusion8
- Ransomware5
- Malware1
- Phishing & smishing1
Key incidents in South Korea
ITOOZA hack leaks more than 130,000 personal data records
130KImpact: More than 130,000 personal data records
Stock investment information site ITOOZA was hacked, leaking more than 130,000 personal data records. The timing of the incident, the specific attack method and follow-up measures have not been confirmed.
Read on 보안뉴스 ↗Investigators summon MBC reporter over leak of Han Dong-hoon confirmation hearing documents
Impact: Leak of Han Dong-hoon confirmation hearing documents
The investigation team probing the leak of confirmation hearing documents on Han Dong-hoon summoned and questioned an MBC reporter. The timing and circumstances of the leak and its specific scope have not been confirmed.
Read on 한겨레 ↗Retaliatory hacks on South Korean sites over reported KF-21 data leak attempt
A hacker angered by reports that an Indonesian national had been caught trying to leak data on the Korean KF-21 fighter jet carried out retaliatory hacks on South Korean websites. The targeted sites, the specific extent of the damage and the response have not been confirmed.
Read on 보안뉴스 ↗Prosecutors raid Gwangju police over suspected investigation info leak
Prosecutors raided the Gwangju police in connection with a suspected leak of investigation information. Whether a leak occurred, the scope of the information and the specific actions of those involved have not been confirmed.
Read on OhmyNews ↗Financial scams impersonating Welsi Investment Group raise data leak concerns
A warning was issued about financial scams impersonating Welsi Investment Group. Concerns about a personal data leak were also raised; whether any data was actually leaked and the extent of the damage have not been confirmed.
Read on 보안뉴스 ↗
Supply-chain breaches
Cyberattacks disrupt healthcare providers and military pharmacies
Impact: Disruption to healthcare providers and military pharmacies
Healthcare providers in Arkansas worked to recover from the aftermath of a cyberattack. Military pharmacies resumed normal operations after a cyberattack. The names of the targeted organizations and the specific extent of the damage have not been confirmed.
Read on Arkansas Business ↗
Key incidents in other countries
Chipmaker Nexperia suffers data leak in ransomware attack
Impact: Data leak
Dutch chipmaker Nexperia was attacked by cybercriminals. After a ransomware gang claimed to have stolen data and published material, Nexperia confirmed the breach.
Related reports: 5 · last report →GHC-SCW breach exposes medical and other data of 533,809 people
533.8KImpact: Personal and medical information of 533,809 people
US healthcare organization GHC-SCW disclosed that personal and medical information of 533,809 people was stolen in a breach that occurred in January. The attacker's attempt to encrypt devices failed. The BlackSuit gang claimed the attack.
Related reports: 4 · last report →Credential stuffing attack compromises 576,000 Roku accounts
Impact: 576,000 user accounts
576,000 user accounts were compromised at Roku in a credential stuffing attack. Roku disclosed the account breach, which it confirmed as its second security incident.
Related reports: 4 · last report →Names and email addresses of 10,000 Home Depot employees leaked
10KImpact: Names and email addresses of 10,000 employees
The names and email addresses of 10,000 Home Depot employees were published on a data leak forum. Home Depot confirmed the employee data leak.
Related reports: 2 · last report →Targus detects hacker activity on file servers
Targus disclosed a cyberattack after detecting a hacker on its file servers. A review of potential litigation over the Targus data breach subsequently got under way.
Related reports: 2 · last report →