Week 22, 2025 security incident report
Hacking and data breach incidents newly reported 2025.05.26 ~ 06.01
In South Korea, a customer data leak caused by access to a platform of Tiffany Korea's contractor drew the most attention, followed by the leak of names, addresses, contact details and sales data and controversy over a delayed response. Allegations of a leak of KB Life Insurance employees' data and of a personal data leak at Meat Friends also surfaced, showing that employees as well as customers were among those affected. Across all types, personal data leaks were the most common at 27, and the chain of hacks at Nike and Adidas and the chain-reaction damage from Adidas to Mediclinic also stood out. Overseas, a ransomware attack on Covenant Health leaked the data of 478,188 patients, and Victoria's Secret suspended its website and some services after a cyberattack.
By type
- Data breach25
- Hacking & intrusion21
- Ransomware12
- DDoS1
Key incidents in South Korea
Customer data leaked at Tiffany Korea via access to vendor platform
Impact: South Korean customers' names, addresses, phone numbers, email addresses, internal customer numbers, sales data and more
Unauthorized access to a platform run by a vendor managing Tiffany Korea's customer data led to the leak of South Korean customers' personal information. The leaked items included names, addresses, phone numbers, email addresses, internal customer numbers and sales data. The company notified customers of the leak, and the Personal Information Protection Commission (PIPC) launched an investigation.
Related reports: 8 · last report →Tiffany customer data leak and criticism of slow response
Impact: Information of thousands of customers
A leak of Tiffany customers' personal information came to light. Criticism was raised that the company was slow to respond after the leak, and it also emerged that a data leak overseas had affected thousands of customers.
Related reports: 4 · last report →KB Life Insurance employee data leaked
Impact: Leak of executive and employee information
Information on KB Life Insurance executives and employees was leaked. The scale of the leak, when it occurred, its specific cause and the response have not been confirmed.
Read on 전자신문 ↗Back-to-back hacks at Nike and Adidas shake customer trust
Sports brands Nike and Adidas suffered a blow to customer trust following a series of hacking incidents. The specific timing of the hacks, the scale of the damage and the response have not been confirmed.
Read on 뉴스스페이스 ↗MeatFriends faces data breach allegations, confirms contact from hacker
Allegations of a personal data breach have been raised against MeatFriends. The company said it had been contacted by a hacker claiming to hold its data. Whether a breach actually occurred, its scale and any follow-up measures have not been confirmed.
Read on 뉴스필드 ↗
Supply-chain breaches
Nationwide Recovery Service hack affects more than 560,000 people
560KImpact: Data of more than 560,000 people leaked
A data breach caused by hacking occurred at Nationwide Recovery Service. In May 2025, the number of victims was tallied at more than 560,000, and in June damage on the scale of 500,000 people was also reported.
Related reports: 2 · last report →
Also affected: 1- University of Chicago Medical CenterUChicago Medicine patient data exposed in vendor incidentPatient information exposed
Hack of Adidas third-party customer service provider leaks customer data
Impact: Customer personal information leaked; number of affected people unconfirmed
A third-party customer service provider for Adidas was hacked, leaking customers' personal information. Adidas disclosed the breach and said credit card information was not leaked. The number of affected customers and whether US and EU customers were included have not been confirmed.
Related reports: 10 · last report →
Also affected: 1- MediclinicMediclinic employee data leaked in cyberattack on service providerLeak of employee information
Key incidents in other countries
Victoria's Secret cyberattack shuts down website and some services
Impact: Shutdown of US website and some in-store services, disruption of online orders and postponement of earnings release
While responding to a cybersecurity incident, Victoria's Secret shut down its US website and some in-store services, disrupting online orders. It later confirmed the hack and warned that customer information may have been put at risk. It also postponed its earnings release due to the incident, and whether data was leaked or whether it was a ransomware attack has not been determined.
Related reports: 9 · last report →Migos Instagram hack leaks Solana co-founder's personal data
Impact: Personal information of Solana co-founder Raj Gokal
Migos' Instagram account was hacked, and the personal information of Solana co-founder Raj Gokal was published. The attacker used the personal information to make threats and demand 40 bitcoin.
Related reports: 5 · last report →Data of 1.6 million Etsy, TikTok Shop and other e-commerce customers leaked
1.6MImpact: Data including email addresses of more than 1.6 million e-commerce customers
Data on more than 1.6 million customers of e-commerce services such as Etsy, TikTok Shop and Poshmark was leaked. The exposed information included customer email addresses, and a misconfiguration was identified as the cause of the leak.
Related reports: 4 · last report →Czech Republic blames China-linked APT31 for foreign ministry network breach
Impact: Breach of the foreign ministry's communications network
A breach targeting the Czech Ministry of Foreign Affairs' communications network had been ongoing since 2022. On May 28, 2025, the Czech government named APT31, linked to China's Ministry of State Security, as the attacker, and the ministry introduced a new communications system after detecting the compromise. The European Union expressed solidarity with the Czech Republic, while the Chinese embassy denied the allegations.
Related reports: 4 · last report →Legal Practice Board of Western Australia hit by ransomware, data leaked
Impact: Victims of the data leak
The Legal Practice Board of Western Australia was hit by a Dire Wolf ransomware attack in May 2025. In August of the same year, the board said no data had been published following the attack. In October, it began notifying victims of the data leak.
Related reports: 4 · last report →