Week 1, 2026 security incident report

Personal data of Weverse fan-signing event winners leaked

Impact: Personal data of fan-signing event winners

The leak of personal data of fan-signing event winners at Weverse came to light on January 2, 2026. Weverse immediately removed the staff member involved in the misconduct from their duties. Allegations of rigging in the selection of fan-signing event winners were later raised.

Ransomware attack on Inha University cripples website, leaks personal data

Impact: Personal data leak and 14-hour website outage

Inha University was hit by a ransomware attack that took down its website, which was restored after 14 hours. The university later confirmed a personal data leak and took legal action against Gunra. Members announced plans for a class-action damages claim, and the university issued an official apology and began a full review of its security systems.

900,000 personal records leaked even at certified medical institution

900KImpact: 900,000 personal records

900,000 personal records were leaked from a certified medical institution. The action taken over the leak was limited to an administrative fine and a recommendation for improvement.

All three South Korean mobile carriers hit by hacking

Impact: Hacking damage at South Korea's three mobile carriers

All three of South Korea's mobile carriers have suffered hacking incidents. The extent of the damage at each company, when the breaches occurred and the responses have not been confirmed.

Hack of New Zealand's Manage My Health steals medical documents of about 100,000 people

100KImpact: Theft of medical documents of about 100,000 people

New Zealand patient portal Manage My Health was hacked, and medical documents of about 100,000 people were stolen, with personal health records appearing on the dark web. Notification of affected patients began, but about 47,000 people had no contact details, delaying their notification. The final investigation also identified a personal data handling problem in which hospital records of patients without accounts had been brought into the portal.

Link raised between cyberattack and blackout during operation to capture Venezuela's Maduro

Impact: Blackout in Caracas, Venezuela

The possibility was raised that a US cyberattack was involved in the blackout that occurred in Venezuela during the operation to capture Maduro. Trump suggested that the US had cut off power with a cyberattack during the strike, and further information supporting the role of a cyberattack emerged afterward.

Sedgwick government contracting subsidiary hit by ransomware attack and data leak

A cyber intrusion and data leak occurred at Sedgwick's government contracting subsidiary. Sedgwick confirmed the incident, and the TridentLocker ransomware group claimed the attack.

Cyberattack on Apple's Chinese assembly partner raises data exposure concerns

Apple's assembly partner in China was hit by a supply chain cyberattack. When the attack came to light in December 2025, the possibility was raised that manufacturing data and Apple's confidential information had been exposed. Whether data was actually leaked and the extent of the damage have not been confirmed.

WIRED hack exposes 2.4 million accounts

2.4MImpact: Information on 2.4 million accounts

Tech publication WIRED was hacked, exposing subscriber and account information. In December 2025, the personal data of 2.3 million subscribers was reported to have been leaked on the dark web. In January 2026, the number of affected accounts was put at 2.4 million.