Week 23, 2024 security incident report
Hacking and data breach incidents newly reported 2024.06.03 ~ 06.09
From June 3 to 9, 2024, the only newly recorded incident in South Korea was a personal data leak at Kangdong Sacred Heart Hospital, notable for the fact that the leak came to light six years after it occurred. Across all types in South Korea and abroad, personal data leaks were the most common at 32, followed by 16 hacking/intrusion cases and 5 ransomware cases. Overseas, the National Public Data hack, which leaked Social Security numbers and other data, received the most coverage with 60 articles, while disruptions to patient care and leaks of patient information at London hospitals following the attack on Synnovis, and cascading damage from Snowflake to Ticketmaster, Pure Storage and Advance Auto Parts, stood out.
By type
- Data breach31
- Hacking & intrusion15
- Ransomware5
Key incidents in South Korea
Kangdong Sacred Heart Hospital personal data leak comes to light after 6 years
Personal information was leaked at Kangdong Sacred Heart Hospital due to misconduct by an outsider. The leak came to light 6 years after the incident occurred.
Read on 보안뉴스 ↗
Supply-chain breaches
Snowflake customer data stolen using credentials harvested by infostealers
Impact: Significant volumes of data stolen from multiple customers
Credentials linked to infostealer malware were used to steal Snowflake customer data. Multiple customers, including Ticketmaster, were affected, and Mandiant confirmed significant data theft and attacks aimed at extortion. Lawsuits were subsequently filed against Snowflake, AT&T and Ticketmaster.
Related reports: 51 · last report →
Also affected: 3
Key incidents in other countries
National Public Data hack leaks Social Security numbers and more
Impact: Leak of personal information including Social Security numbers; exact scale of damage unconfirmed
Background check company National Public Data was hacked, and Social Security numbers and personal information were published online. The leaked data was said to amount to billions of records, but even when the company confirmed the breach, the exact scope of the damage had not been determined. The company filed for bankruptcy in October 2024 and resumed service in August 2025.
Related reports: 60 · last report →Synnovis ransomware attack disrupts London hospital care and leaks patient data
900KImpact: More than 900,000 patients affected; about 1,600 surgery and care appointments canceled in one week
UK pathology provider Synnovis was hit by a ransomware attack in 2024 that disrupted transfusions, surgery and care at London hospitals. Patient names, dates of birth, NHS numbers and test results that could be linked to some individuals were stolen, and more than 900,000 patients were affected. Hospitals used paper records, and after finishing its analysis of the stolen data, Synnovis began notifying affected healthcare organizations in November 2025.
Related reports: 38 · last report →Ransomware attack on London hospitals disrupts surgery and blood transfusion services
300MImpact: Disruption at multiple hospitals, blood shortages and surgery delays, leak of 300 million patient records
Several London hospitals suffered operational disruption from a ransomware attack, and a critical incident was declared. Blood shortages and surgery delays followed, and the leak of 300 million patient records was also reported. Restoration of the blood transfusion service was projected for the fall.
Related reports: 9 · last report →Data leaked from Indian Telangana Police's TSCOP app
Impact: TSCOP app data leaked; specific scale unknown
A hack of the Indian Telangana State Police's TSCOP app led to a data breach. It was reported as the second major data breach targeting the police within a week, and the police cited the possibility of a technical glitch.
Related reports: 9 · last report →User data leaked from Telangana State Police's Hawk Eye app
200KImpact: Personal information of more than 200,000 Hawk Eye app users
The Hawk Eye app of India's Telangana State Police was hacked, leaking the personal information of more than 200,000 users. When the data appeared on a hacker forum, police registered a case and launched an investigation. The police later also shut down the TS-COP app.
Related reports: 7 · last report →