Week 6, 2025 security incident report
Hacking and data breach incidents newly reported 2025.02.03 ~ 02.09
In South Korea, monetary demands following the hacking of Sunye's social media account, as well as a DDoS attack on Noonoo TV and problems with access to its mirror sites, occurred. The two incidents showed, respectively, monetary demands through the compromise of a personal account and the obstruction of access to a service. New incidents overall numbered 2 in South Korea and 9 overseas, and by type, hacking/intrusion was the most common at 6, followed by ransomware at 3. Overseas, the Lee Enterprises ransomware incident received the most coverage with 8 articles, causing the leak of personal data of about 40,000 people, disruptions to newspaper publishing and payments, and $2 million in recovery costs, while operational disruptions at educational institutions and large-scale data leaks at medical institutions also occurred.
By type
- Hacking & intrusion6
- Ransomware3
- DDoS1
- Data breach1
Key incidents in South Korea
Sunye's social media hacked, money demanded
Sunye had her social media account hacked and received demands for money. The hacked account was shut down, and she asked Jo Kwon and Kahi for help.
Read on Daum ↗Noonoo TV DDoS attack and access to mirror sites
Issues were raised over DDoS attacks and access to free mirror sites in connection with illegal viewing on Noonoo TV. The specific timing of the attacks, the scale of the damage and the response have not been confirmed.
Read on 국제뉴스 ↗
Key incidents in other countries
Lee Enterprises ransomware disrupts newspapers and leaks data
40KImpact: Personal information of about 40,000 people leaked, disruption to newspaper publication and payments, and $2 million in recovery costs
US newspaper company Lee Enterprises was hit by a ransomware attack that disrupted the publication of its newspapers and payments to freelancers and contractors. About 40,000 people had their personal information leaked in the attack, including Social Security numbers. The company spent $2 million on recovery.
Related reports: 8 · last report →Cyberattacks hit three Los Angeles schools
Impact: Three Los Angeles schools
Cyberattacks occurred at three schools in Los Angeles. The exact names of the affected institutions, the date, the scale of the damage and the response have not been confirmed.
Related reports: 6 · last report →Keir Starmer's personal email account suspected of being hacked
Impact: Suspected compromise of a personal email account, which was taken out of use
An investigation was conducted after British Prime Minister Keir Starmer's personal email account was suspected of having been hacked. Russian hackers were suspected of involvement, and Starmer stopped using the email account.
Related reports: 4 →Ransomware attack disrupts phones, email and classes at University of The Bahamas
Impact: Disruption of phone, email and class operations
The University of The Bahamas was hit by a ransomware attack that disrupted phone, email and class operations. The extent of the damage and recovery measures have not been confirmed.
Related reports: 2 · last report →Hospital Sisters Health System breach affects 883,000 people
883KImpact: Data breach affecting 883,000 people
A data breach occurred at Hospital Sisters Health System in August 2023. The incident affected 883,000 people, and the specific data exposed and response measures have not been given.
Read on The HIPAA Journal ↗