Week 37, 2024 security incident report
Hacking and data breach incidents newly reported 2024.09.09 ~ 09.15
From September 9 to 15, 2024, two new cybersecurity incidents were confirmed in South Korea, with the leak of personal data of about 3.06 million members and non-members in a web shell attack on Modetour Network standing out most in both scale of damage and volume of coverage. At the Korea Vocational Competency Education Institute, hacking also leaked four categories of personal data including names and phone numbers, as personal data damage occurred in the travel and education sectors. By incident type overall, personal data breaches were the most common at 29, followed by 10 hacking/intrusion incidents, 5 ransomware incidents and 1 DDoS attack, and cascading damage from Compass Group to Bennett Currie was also seen. Overseas, 43 new incidents were recorded, with data leaks via AT&T's external cloud provider and a third-party drive at Fortinet, as well as large-scale exposure of personal and card data in the payments sector, standing out.
By type
- Data breach29
- Hacking & intrusion10
- Ransomware4
- DDoS1
Key incidents in South Korea
Modetour Network web shell attack leaks personal data of about 3.06 million people
3.1MImpact: Personal information of about 3.06 million members and non-members
In June 2024, Modetour Network's website was hit by a web shell attack exploiting a file upload vulnerability, and personal information of about 3.06 million members and non-members was stolen. The leaked data included names, dates of birth, mobile phone numbers, CI and DI values, and the company announced the incident in September despite becoming aware of it that June. The company apologized and asked users to change their passwords, and a sanction by the Personal Information Protection Commission and a damages ruling followed.
Related reports: 25 · last report →Hack at Korea Vocational Competency Education Institute leaks four types of personal data
Impact: Four items of personal information, including names and phone numbers
Personal information was leaked in a hack at the Korea Vocational Competency Education Institute. The leaked data comprised four items, including names and phone numbers.
Read on 보안뉴스 ↗
Supply-chain breaches
Australia's Compass Group confirms Medusa ransomware attack
Sydney-based Compass Group in Australia confirmed a Medusa ransomware attack. It later confirmed a second hack, and the specific extent of the damage and recovery measures have not been confirmed.
Related reports: 2 · last report →
Key incidents in other countries
LVHN patient personal data breach
Impact: Patients' personal information
A breach of patients' personal information occurred at LVHN. A $65 million settlement was reached in connection with the incident.
Related reports: 12 · last report →AT&T customer billing data leaked from third-party cloud vendor
Impact: Customer billing information
In 2023, customer billing information that AT&T had provided to a third-party vendor was leaked through a breach of that vendor's cloud. In September 2024, AT&T agreed to pay $13 million in connection with the US Federal Communications Commission investigation into the incident and pledged to improve security.
Related reports: 11 · last report →Fortinet customer data leaked in third-party drive breach
Impact: Limited number of customer files leaked; attacker claims 440GB stolen
A hacker accessed a Fortinet third-party drive, leaking information on customers in the Asia-Pacific region. Fortinet confirmed access to a limited number of customer files, while the attacker claimed to have stolen 440GB of files.
Related reports: 8 · last report →Class actions filed over suspected Ally Bank personal data leak
It was alleged that consumers' personal information may have been exposed in a data breach at Ally Bank in April. Two class actions were filed in connection with the incident, alleging that the company's negligence led to the breach. The actual scale of the leak has not been confirmed.
Related reports: 6 · last report →Payment processor data breach exposes card data of about 1.7 million people
1.7MImpact: Credit card information of about 1.7 million people
A data breach at a payment processor exposed the credit card information of about 1.7 million people. The company said the breach may have affected about 1.7 million people.
Related reports: 5 · last report →