Week 16, 2024 security incident report
Hacking and data breach incidents newly reported 2024.04.15 ~ 04.21
From April 15 to 21, 2024, two new incidents were confirmed in South Korea: a social media account hack and a leak of personal data of employment insurance subscribers at the Goyang branch of the Korea Workers' Compensation & Welfare Service. The incidents in South Korea took the form of the compromise of an individual's social media account and the leak of personal data held by a public institution. By type across South Korea and abroad, hacking/intrusion was the most common at 25, followed by 10 ransomware cases and 5 personal data leaks. Overseas, 38 incidents occurred, with the leak of personal data of 751,895 people at Frontier Communications standing out in both scale and volume of coverage, and fake crypto promotions using celebrity accounts and water overflows caused by attacks on water facilities also emerged.
By type
- Hacking & intrusion24
- Ransomware10
- Data breach5
Key incidents in South Korea
Hacked social media account shows unknown woman on profile
A social media account was hacked, causing an image of an unknown woman to appear on the account's profile page. On April 18, 2024, a warning about social media account hacking was issued along with the case.
Related reports: 2 →Personal data of employment insurance subscribers leaked at COMWEL Goyang branch
Impact: Personal information of employment insurance subscribers
Personal information of employment insurance subscribers was leaked due to misconduct by a former employee of the Goyang branch of the Korea Workers' Compensation and Welfare Service. The scale of the leak, when it occurred and follow-up measures have not been confirmed.
Read on 보안뉴스 ↗
Key incidents in other countries
Frontier Communications Hack Exposes Personal Data of Roughly 750,000 People
751.9KImpact: Personal data, including names and Social Security numbers, of 751,895 people
U.S. telecom company Frontier Communications discovered an intrusion into its network in April 2024 and shut down some systems, causing operational disruption. Personal data of 751,895 people, including names and Social Security numbers, was leaked, and RansomHub claimed the attack and published some of the stolen data. The company notified victims of the breach, and a class action and a settlement with the state of Connecticut followed.
Related reports: 10 · last report →Tom Holland's X account hacked to promote fake crypto
Impact: Scam promotional posts on X account and unauthorized change to account bio
Actor Tom Holland's X account was hacked and used to post promotions for a fake crypto asset and Spider-Verse NFTs. The account bio was also changed; the extent of any financial losses and whether the account has been recovered have not been confirmed.
Related reports: 8 · last report →Cyberattack on Texas water systems causes overflow
Impact: Overflow at one water system
Water systems in small towns in the US state of Texas were hit by cyberattacks, and one system overflowed. A security firm suggested that a Russia-linked hacking group may have been involved. The targets included Muleshoe's water system.
Related reports: 5 · last report →State-backed hackers breach MITRE research network
Impact: Breach of the NERVE research network
MITRE's NERVE research network in the US was breached by state-backed hackers in December 2023. The attackers chained Ivanti VPN zero-day vulnerabilities, bypassed multi-factor authentication through session hijacking, and used web shells and backdoors while moving through the VMware environment. MITRE disclosed the breach in April 2024 and completed its internal investigation in May.
Related reports: 5 · last report →Void Interactive confirms hack, denies user data leak
Void Interactive, developer of Ready or Not, was hacked in March 2024. The company confirmed the breach and said no user or employee information had been leaked.
Related reports: 3 · last report →