Week 21, 2024 security incident report
Hacking and data breach incidents newly reported 2024.05.20 ~ 05.26
From May 20 to 26, 2024, 5 new cybersecurity incidents were recorded in South Korea and 41 overseas, with personal data leaks the most common type overall at 30. In South Korea, the leak of personal data of some 10,000 teachers while the Ministry of Education was sending an official letter stood out most in both scale and volume of coverage, and damage in the education sector continued with the leak of information on some 500 officials at the Gyeonggi Pyeongtaek Office of Education. An insurance agent's leak of personal data entrusted to them and the hacking of a senior army general's personal email also occurred, and the aftermath of DDoS attacks on Faker also drew attention. Overseas, personal data damage appeared across multiple sectors, with the WebTPA breach affecting 2.4 million health insurance members as well as exposures of information related to the European Parliament, Western Sydney University and Walmart retirement plan participants reported.
By type
- Data breach28
- Hacking & intrusion11
- Ransomware4
- DDoS1
Key incidents in South Korea
Personal data of some 10,000 teachers leaked as Education Ministry sends official letter
10KImpact: Personal information of some 10,000 teachers
The personal information of some 10,000 'classroom revolution' lead teachers was leaked while the Ministry of Education was sending out an official letter. The ministry apologized and said it would deal strictly with the matter based on the findings of an investigation and prevent a recurrence. Teachers' groups considered legal action.
Related reports: 6 · last report →Police investigate hacking of senior military general's personal email
The personal email of a senior military general was hacked, prompting a police investigation. North Korea was presumed to be behind it, and the military said no military data was leaked.
Related reports: 2 →Personal data of some 500 officials leaked by Gyeonggi Pyeongtaek Office of Education
500Impact: Personal information of some 500 local government officials
The personal information of some 500 local government officials was leaked by mistake at the Gyeonggi Pyeongtaek Office of Education. The specifics of the mistake, the date of the incident and the follow-up response have not been confirmed.
Read on 보안뉴스 ↗Insurance agent at major company leaks entrusted personal data
An insurance agent at a major company leaked personal information that had been entrusted to them. The insurer's name, the scale of the damage, the date of the incident and the response have not been confirmed.
Read on 부산일보 ↗North American media focus on aftereffects of DDoS attack on Faker
Faker was hit by a DDoS attack and suffered its aftereffects. North American media expressed concern about these aftereffects.
Read on 매일경제 ↗
Key incidents in other countries
European Parliament staff ID cards and HR records leaked
Impact: Staff ID cards, personal records and HR files
Documents containing European Parliament staff ID cards and personal information were stolen. Privacy group noyb later filed two complaints against the European Parliament over the large-scale leak of HR data.
Related reports: 4 · last report →Western Sydney University student and staff data leaked, 7,500 notified
7.5KImpact: Leak of student and staff names, phone numbers and email addresses; 7,500 affected people notified
A data breach at Western Sydney University leaked the names, phone numbers and email addresses of students and staff. The university disclosed the breach and notified the 7,500 people affected.
Related reports: 3 · last report →Merrill employee error exposes Walmart retirement plan participants' data
Impact: Information of some Walmart 401(k) retirement plan participants
A Merrill employee's error exposed the information of some participants in Walmart's 401(k) retirement plan. Merrill described it as a one-off error, and the exact number of people exposed, the date of the incident and follow-up measures have not been confirmed.
Related reports: 3 →Actress Rubina Dilaik's X account hacked
Impact: Hacking of Rubina Dilaik's X account
Actress Rubina Dilaik's X account was hacked. Dilaik warned users not to interact with the account. She later said the hack made it hard for her to feel safe.
Related reports: 3 · last report →Hacked documents expose links between US gun sales and Mexican crime
Documents leaked in a hack revealed links between US gun dealers and Mexican cartel violence. Information was also disclosed on the scale of guns from Arizona flowing to Mexican criminals.
Related reports: 2 · last report →