Week 52, 2024 security incident report
Hacking and data breach incidents newly reported 2024.12.23 ~ 12.29
From December 23 to 29, 2024, two new incidents were confirmed in South Korea: the hacking of the Ministry of Environment's official X account and a personal data leak at the Korea Education and Research Information Service (KERIS). The South Korean incident with the most notable scale of damage was the leak of personal data of more than 950 school staff who took part in developing AI digital textbooks, while at the Ministry of Environment, two posts boasting of the hack appeared on its official X account and signs of a source code leak were also raised. Of 25 incidents overall, hacking/intrusion was the most common at 13, followed by 6 personal data breaches, and in South Korea, account compromises and personal data exposure occurred in the public and education sectors. Overseas, a cyberattack on Japan Airlines caused 4 flight cancellations and 71 delays, and the risk of data leaks affecting 2.6 million users from the hacking of numerous Chrome extensions, as well as cyberattacks and ransomware damage in the healthcare sector, were also reported.
By type
- Hacking & intrusion13
- Data breach6
- Phishing & smishing3
- Ransomware2
- DDoS1
Key incidents in South Korea
Ministry of Environment's official X account hacked; signs of source code leak
2Impact: Two posts boasting of a hack published on official X account
In the early hours of December 28, 2024, two posts boasting of a hack appeared on the official X account of South Korea's Ministry of Environment. The posts were deleted and the account was restored to normal the same day. On January 2, 2025, signs of a source code leak also came to light.
Related reports: 2 · last report →KERIS leaks data of about 950 teachers and staff involved in AI digital textbook development
950Impact: Personal information of about 950 teachers and staff involved in AI digital textbook development
Personal information of teachers and staff who took part in developing AI digital textbooks was leaked from KERIS. Around 950 teachers and staff were affected.
Read on 보안뉴스 ↗
Key incidents in other countries
Japan Airlines cyberattack causes 4 cancellations, 71 delays
Impact: 4 flights canceled, 71 delayed
In December 2024, Japan Airlines suffered a system outage due to a cyberattack, disrupting domestic and international flights. Four flights were canceled and 71 were delayed. Japan Airlines restored its systems and resumed same-day ticket sales.
Related reports: 22 · last report →Mass hijacking of Chrome extensions puts user data at risk
2.6MImpact: 2.6 million users' data at risk of exposure
Attackers hijacked multiple Google Chrome extensions and injected malicious code in a supply chain attack. A campaign to steal login credentials was identified, with about 2.6 million users reportedly exposed to risk.
Related reports: 14 · last report →VeryDarkMan claims NGO account hack and theft of ₦180 million
Impact: Claimed theft of ₦180 million
In December 2024, VeryDarkMan claimed that his NGO's account and website had been hacked and ₦180 million stolen. Questions were raised in Nigeria about the claim, and whether any loss actually occurred and the outcome of the response have not been confirmed.
Related reports: 5 · last report →Community Health Northwest Florida hit by cyberattack
Community Health Northwest Florida was hit by a cyberattack. It then worked to restore services, and news of the systems' restoration was reported on January 12, 2025.
Related reports: 5 · last report →American Addiction Centers ransomware attack exposes patient data
411KImpact: Information of about 411,000 patients
American Addiction Centers was hit by a ransomware attack that exposed the information of about 411,000 patients. In January 2025, a class action lawsuit was filed over the breach.
Related reports: 3 · last report →