Week 36, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.02 ~ 09.08
In South Korea, the leak of 22 categories of personal data on about 80,000 Ewha Womans University graduates, along with some parents' information, received the most coverage, and the leak of 180,000 litigation files totaling 1.59 TB from the law firm Logos also highlighted large-scale data leaks. Hacks of high-profile public-facing accounts followed one after another, including the YouTube channels of an entertainment agency and its singer and T1's X account, while Curve and Kyungchang Industrial saw ransomware damage disclosed and suspected leaks of internal data. Across all incident types in South Korea and abroad, 20 personal data breaches and 14 hacking/intrusion incidents made up the majority. Overseas, reports included the Transport for London hack affecting about 10 million people, a leak of Avis customer data, claims of a large-scale data leak at VK, and a possible MOVEit-related leak of Medicare beneficiaries' information.
By type
- Data breach17
- Hacking & intrusion12
- Ransomware5
- Phishing & smishing1
Key incidents in South Korea
Personal data of about 80,000 Ewha Womans University alumnae leaked
80KImpact: 22 items of personal information of about 80,000 graduates, plus addresses and contact details of some guardians
Ewha Womans University's integrated information system was hacked via an overseas IP address, leaking 22 items of personal information of about 80,000 graduates who entered between the 1982 and 2002 academic years. The leaked information included resident registration numbers and addresses, and the addresses and contact details of some graduates' guardians were also leaked. The Seoul Metropolitan Police Agency's cyber investigation unit launched a preliminary inquiry.
Related reports: 9 · last report →Logos Law LLC hack leaks 180,000 litigation files
180KImpact: 180,000 litigation files; 1.59 TB of data
Logos Law LLC was hacked, leaking 180,000 client litigation files totaling 1.59 TB. In September 2024, a hacker claimed to be selling Logos data on the dark web for 5 BTC. The Personal Information Protection Commission (PIPC) imposed a fine of KRW 523 million on Logos over the personal data leak.
Related reports: 7 · last report →Big Planet Made Entertainment's YouTube channel hacked
Big Planet Made Entertainment's YouTube channel was hacked. The specific scale of the damage, the attack method and the response measures have not been confirmed.
Related reports: 3 · last report →Ransomware gang El Dorado names South Korean company Curve as victim
Ransomware gang El Dorado listed South Korean company Curve as one of 17 victim companies. The specific scale of the damage, when the attack occurred and the company's response have not been confirmed.
Read on 보안뉴스 ↗Personal data leaks of celebrities including Mingyu and RM
Issues arose over leaks of personal information of celebrities including Mingyu and RM. L'Occitane was mentioned in connection with the Mingyu case, and the specific circumstances of the leaks and the response have not been confirmed.
Read on 스포츠월드 ↗Kyung Chang Industrial ransomware attack believed to have leaked internal data
Impact: Suspected leak of shared data and files from some employees' PCs; 1.8TB according to the attackers' claim
Auto parts maker Kyung Chang Industrial was hacked by a ransomware group, and shared data and files from some employees' PCs are believed to have been leaked. The attackers claimed the stolen data amounted to 1.8TB. Kyung Chang Industrial did not give a specific response to press inquiries.
Read on 더벨 ↗YouTube channels of Lee Seung-gi and Taemin hacked
Impact: Hacking of Lee Seung-gi's and Taemin's YouTube channels
The YouTube channels of Lee Seung-gi and Taemin were hacked. It was reported that Elon Musk was appearing on the affected channels.
Read on YTN ↗T1 X account hacked; warning issued over suspicious coin-launch URLs
T1's X account was hacked, prompting warnings not to click suspicious URLs related to a coin launch. The specific scale of the damage and the response measures have not been confirmed.
Read on 뉴스1 ↗
Key incidents in other countries
Transport for London hack affects about 10 million people
10MImpact: About 10 million people affected; damage of about 53 billion won
Transport for London was hit by a cyberattack in 2024 that affected about 10 million people. After the attack, staff systems were disrupted and the data feed supplied to travel apps was suspended. The hackers involved were sentenced to prison in July 2026, and the damage was put at about 53 billion won.
Related reports: 15 · last report →Avis hack exposes data of about 300,000 customers
300KImpact: Personal information of about 300,000 customers
Car rental company Avis was hit by a cyberattack, and customers' personal information was stolen. The number of people affected was reported to be about 300,000. The company disclosed the breach, and a legal investigation into the incident was also conducted.
Related reports: 11 · last report →Hacker claims leak of data on 390 million users of Russian social network VK
390MImpact: Claimed leak of data on 390 million users
A hacker claimed to have published data on 390 million users of Russian social media platform VK. VK denied claims that a hack had occurred.
Related reports: 6 · last report →US Centers for Medicare & Medicaid Services notifies about 1 million people of breach
1MImpact: About 1 million people notified
The US Centers for Medicare & Medicaid Services notified about 1 million people in connection with a cyber breach. When the breach occurred and the attack method have not been confirmed.
Related reports: 6 · last report →Lara and Tiffany Trump's X accounts hacked to promote crypto scams
Impact: Lara Trump's and Tiffany Trump's X accounts hijacked and misused to promote scams
The X accounts of Lara Trump and Tiffany Trump were hacked. The hijacked accounts were used to promote fake crypto ventures and scams.
Related reports: 4 · last report →