Week 10, 2025 security incident report
Hacking and data breach incidents newly reported 2025.03.03 ~ 03.09
In South Korea, the leak of personal data of 342,253 customers from the hacking of Black Yak's website and the theft of about 8.65 million WEMIX coins, worth about 9 billion won, stood out. The potential leak or compromise of information on public institution advisory committee members and IT company employees also came to light, and the hacking of Tashu led to a 36-hour service outage. Across all types in South Korea and abroad, personal data breaches were the most common at 29, and in South Korea, coin payout scams using the Personal Information Protection Commission and leak compensation as bait also emerged. Overseas, the leak of information on 700,000 Chicago Public Schools students, ransomware damage at Tata Technologies, and fake coin promotions through hijacked official NBA and NASCAR X accounts occurred.
By type
- Data breach26
- Hacking & intrusion13
- Ransomware7
- Phishing & smishing5
- Malware1
Key incidents in South Korea
Black Yak website hack leaks data of over 340,000 customers
342.3KImpact: Names, genders, dates of birth, mobile phone numbers and trailing portions of addresses of 342,253 customers
On March 4, 2025, a hack of Black Yak's website leaked the names, genders, dates of birth, mobile phone numbers and trailing portions of addresses of 342,253 customers. The company blocked the attacking IPs and proxy access IPs and patched vulnerabilities in its website. An investigation found that an administrator account had been taken over through an SQL injection attack, and a fine of 1.391 billion won was imposed for inadequate security measures.
Related reports: 11 · last report →WEMIX hack: about 8.65 million coins worth 9 billion won stolen
Impact: About 8.65 million WEMIX coins, worth about 9 billion won
WEMIX was hacked, and about 8.65 million coins worth about 9 billion won were stolen. The company pointed to the leak of material uploaded to a public repository by a worker in 2023 as the likely cause. On March 17, 2025, it announced plans to recover the losses, strengthen security and resume services, explaining that the delay in disclosure was intended to avoid further attacks and market turmoil.
Related reports: 9 · last report →Scam impersonating PIPC offers data breach compensation in crypto
On March 4, 2025, a scam came to light that falsely offered compensation for personal data breaches paid in cryptocurrency. Cases of scams impersonating the Personal Information Protection Commission (PIPC) were also identified.
Related reports: 3 · last report →Korea's NIA leaks data of 6,545 people including advisory committee members
6.5KImpact: Personal information of 6,545 people, including advisory committee members
It was reported on March 3, 2025, that personal information of 6,545 people, including advisory committee members, had been leaked externally from Korea's National Information Society Agency. The agency reported the incident to the Personal Information Protection Commission (PIPC).
Related reports: 2 →Malware on Kakao Enterprise servers leaks employee information
60Impact: Possible compromise of account information, including email addresses and phone numbers, of about 60 employees
On February 21, 2025, malware was discovered on Kakao Enterprise's internal infrastructure servers, and a possible compromise of account information, including the email addresses and phone numbers of about 60 employees, was identified. The Personal Information Protection Commission (PIPC) launched an investigation into how the leak occurred and its scale.
Related reports: 2 · last report →Students anxious over personal data leak of unknown cause
Students are anxious over a personal data leak of unknown cause. The affected organization, the scale of the leak and the response have not been confirmed.
Read on 채널PNU ↗Tashu hack halts service for 36 hours
Impact: 36-hour outage of the Tashu service
Tashu was down for 36 hours due to a hack. It was stated that no personal information was leaked.
Read on 충청뉴스 ↗
Key incidents in other countries
NBA and NASCAR official X accounts hacked to promote fake crypto
Impact: Hijacking of the NBA and NASCAR official X accounts
The official X accounts of the NBA and NASCAR were hacked. The attackers used the hijacked accounts to promote a fake cryptocurrency.
Related reports: 4 →Data of 700,000 Chicago Public Schools students leaked
700KImpact: Information on 700,000 students
Hackers stole student information from Chicago Public Schools. As reported in March 2025, the leak affected 700,000 students.
Related reports: 3 · last report →NTT Communications breach hits data of about 18,000 corporate customers
Impact: Information on about 18,000 corporate customers
The service order management system of Japan's NTT Communications was breached. Hackers gained unauthorized access to information on about 18,000 corporate customers. The specific date and follow-up response have not been confirmed.
Related reports: 3 · last report →Indian composer D. Imman's X account hacked
Impact: D. Imman's X account
The X account of Tamil music composer D. Imman was hacked. Imman asked fans to ignore any suspicious or unauthorized posts.
Related reports: 3 →Ransomware hits Singapore HomeTeamNS server holding employee data
Impact: Server storing current and former employee information and some members' vehicle information affected
A server belonging to HomeTeamNS, a Singapore nonprofit, was hit by a ransomware attack. The server stored information on current and former employees and vehicle information of some members. The organization isolated the server and launched an investigation, and no signs of data exfiltration were found.
Related reports: 3 →