Week 41, 2024 security incident report
Hacking and data breach incidents newly reported 2024.10.07 ~ 10.13
From October 7 to 13, 2024, six new cybersecurity incidents were recorded in South Korea, with the leak of about 720,000 files, including nuclear power plant materials, through the hacking of a Korea Hydro & Nuclear Power (KHNP) contractor standing out most. Of these, about 110,000 were KHNP technology-related files, and in South Korea's gaming industry, a supply chain attack inserted a malicious routine into an official security module to distribute remote-control malware, highlighting damage through contractors and official distribution channels. A leak of personal data on tens of thousands of university students and the leak of personal information and secondary victimization in Telegram acquaintance humiliation chat rooms also occurred, and across all incident types in South Korea and abroad, personal data breaches were the most common at 28. Overseas, 40 new incidents were recorded, with service disruptions and data leaks occurring together, including American Water's online service outage, ransomware damage at Casio and a leak of internal materials at Game Freak.
By type
- Data breach27
- Hacking & intrusion16
- Ransomware1
- Malware1
Key incidents in South Korea
KHNP contractor hack leaks about 720,000 files including nuclear plant data
Impact: About 720,000 files including nuclear power plant data, of which about 110,000 were KHNP technology-related materials
A KHNP contractor was hacked twice, in September 2020 and June 2024, and about 720,000 files including nuclear power plant data were stolen. The attackers exploited a vulnerability in a centralized document management system to obtain administrator passwords and were believed to be linked to North Korea. About 110,000 of the leaked files were found to be KHNP technology-related materials.
Related reports: 6 · last report →No charges for apartment manager who disclosed households storing bicycles
An apartment management office head was accused of leaking personal information after disclosing households that had stored bicycles. Authorities concluded there were no grounds for the charge against the manager.
Read on 아파트관리신문 ↗Supply chain attack on South Korean gaming industry plants malicious code in official security modules
Impact: Tampering with security modules of officially distributed games and distribution of remote-control malware to systems where they were installed
In April-May 2024, a supply chain attack targeted South Korean game security vendors and game companies, inserting malicious routines into the security modules of officially distributed games. The attackers used stolen valid certificates to sign backdoors and hacking tools, and remote-control malware was distributed to systems where the modules were installed. The names of the affected companies, the extent of the damage and the response have not been confirmed.
Read on 보안뉴스 ↗Controversy over security rating of university that leaked tens of thousands of students' data
Impact: Personal information of tens of thousands of students
Questions were raised over a university that leaked the personal information of tens of thousands of students receiving a passing grade in the government's university information security assessment. The name of the university, the timing of the leak and the response have not been confirmed.
Read on 이투데이 ↗Telegram 'acquaintance humiliation rooms' and doxxing cause secondary victimization
Impact: Leak of victims' personal details and secondary victimization
A case occurred in which 'acquaintance humiliation rooms' were run on Telegram and victims' personal details were leaked, causing secondary victimization. The number of victims, when it occurred and the investigation or victim support response have not been confirmed.
Read on 연합뉴스 ↗
Supply-chain breaches
KHNP contractor hack leaks about 720,000 files including nuclear plant data
Impact: About 720,000 files including nuclear power plant data, of which about 110,000 were KHNP technology-related materials
A KHNP contractor was hacked twice, in September 2020 and June 2024, and about 720,000 files including nuclear power plant data were stolen. The attackers exploited a vulnerability in a centralized document management system to obtain administrator passwords and were believed to be linked to North Korea. About 110,000 of the leaked files were found to be KHNP technology-related materials.
Related reports: 6 · last report →
Also affected: 1- Korea Hydro & Nuclear Power (KHNP)720,000 items including nuclear plant technology leaked from Korea Hydro & Nuclear Power720,000 items including nuclear power plant technology
Key incidents in other countries
American Water cyberattack forces online services offline
Impact: Shutdown of online services and temporary pause in customer billing
American Water was hit by a cyberattack that led it to shut down its online services and temporarily pause customer billing. The company determined that its water and wastewater facilities were not affected. On October 11, 2024, it began bringing the systems it had shut down back online.
Related reports: 16 · last report →Casio ransomware attack leaks personal data of 8,500 people
8.5KImpact: Personal information of 8,500 people leaked; new product launch and earnings release delayed
Casio was hit by a ransomware attack in October 2024 that leaked information on employees, customers and business partners. The attack delayed the launch of new G-SHOCK watches and the release of earnings results. The number of people whose personal information was leaked, confirmed in January 2025, was 8,500, and Casio notified employees and customers of the leak.
Related reports: 12 · last report →Game Freak Hack Leaks Employee Data and Internal Game Materials
Impact: Employee information and 1TB of internal materials including source code and draft images
Pokémon developer Game Freak was hacked, leaking employee information and internal game materials. The leaked materials included source code and draft images, with the total size put at 1TB. The company confirmed the hack and apologized.
Related reports: 12 · last report →Fidelity Investments breach exposes personal data of about 77,000 customers
77KImpact: Personal information of about 77,000 customers
The personal information of about 77,000 Fidelity Investments customers was exposed. The company offered free identity monitoring services after the breach, and an investigation for a related lawsuit was conducted.
Related reports: 10 · last report →Hacked robot vacuums hurl slurs and chase pets in several US cities
Impact: Slurs and surveillance targeting users in several US cities, and pets chased
It emerged in October 2024 that hackers had taken control of robot vacuums in several US cities. The hacked devices shouted racial slurs at their owners or chased pets. There were also signs that the robot vacuums had been used to spy on their owners.
Related reports: 9 · last report →