Week 4, 2026 security incident report
Hacking and data breach incidents newly reported 2026.01.19 ~ 01.25
From January 19 to 25, 2026, four new incidents were recorded in South Korea, with the hacking of AliExpress seller accounts that caused 8.6 billion won in losses of settlement payments standing out the most. The circulation of leaked Sagolink data on the dark web, the summary indictment of two people, including a former aide, on charges of leaking Han Dong-hoon's personal data, and a town office official's provision of the personal data of 10 workers also emerged as major patterns of personal data leaks and circulation and of information provided by insiders. Across all types in South Korea and abroad, personal data leaks were the most common at 15, followed by hacking/intrusion (12), ransomware (7) and DDoS (1), and chain-reaction damage from Fried Frank to JPMorgan Chase & Co. and from Luxshare to Apple Inc. was also confirmed. Overseas, 31 new incidents were recorded, with an investigation into claims of a 1.4 TB leak of Nike internal files, the exposure of a database containing more than 149 million login credentials and the hacking of Iran's state broadcaster standing out, while the authenticity of the Nike leak claims has not been verified.
By type
- Data breach15
- Hacking & intrusion12
- Ransomware7
- DDoS1
Key incidents in South Korea
AliExpress seller account hack costs 8.6 billion won in payouts
Impact: 8.6 billion won in seller settlement payouts
In October 2025, accounts on AliExpress's business portal for sellers in South Korea were hacked. Seller account passwords and settlement accounts were changed, resulting in the theft of 8.6 billion won in settlement payouts and disruptions to payments. AliExpress said it would fully compensate the losses, and police opened a formal investigation after a preliminary inquiry.
Related reports: 10 · last report →Data leaked from Sagolink circulates on dark web
Some personal information was leaked from Sagolink, a claims adjustment platform. It was later confirmed that the leaked data was circulating on the dark web.
Related reports: 3 · last report →Two including former aide summarily indicted over leak of Han Dong-hoon's personal data
Impact: Han Dong-hoon's personal information
Two people, including a former aide to Choi Kang-wook, were summarily indicted on charges of leaking Han Dong-hoon's personal information. Those indicted included a person formerly affiliated with a lawmaker's office.
Related reports: 3 · last report →Town office official provided 10 workers' personal data to criminal group
10Impact: Personal information of 10 fixed-term workers
An official at a town office was investigated by police on suspicion of misappropriating the personal information of 10 fixed-term workers without authorization and handing it to a criminal organization via Telegram. The official was found to have received a total of 1 million won on two occasions in return for providing the personal information.
Read on 뉴시스 ↗
Supply-chain breaches
Fried Frank data breach affects thousands in the US
659Impact: Information and Social Security numbers of thousands in the US, including 659 JPMorgan customers
A data breach at law firm Fried Frank exposed the information and Social Security numbers of thousands of people in the US. Those affected included 659 JPMorgan customers. A lawsuit related to the leak of Goldman Sachs investment information was also filed.
Related reports: 2 · last report →
Also affected: 1RansomHub claims theft of Luxshare design files and personal data
Impact: Alleged theft of design files, 3D models and employee personal information
The ransomware gang RansomHub claimed to have attacked Chinese electronics manufacturer Luxshare and stolen design files, 3D models and employees' personal information. Concerns were raised about the exposure of confidential information related to major customers such as Apple. As of January 20, 2026, the company had not confirmed a breach, and the actual scale of damage and response measures have not been confirmed.
Related reports: 2 · last report →
Also affected: 1- AppleLuxshare cyberattack leaks Apple's confidential product plansConfidential data and unreleased product plans
Winona County hit by ransomware attack
Winona County in the US was hit by a ransomware attack. The specific date, the scale of damage and the response have not been confirmed.
Read on 5 EYEWITNESS NEWS ↗
Also affected: 1- Spokane CountyCyberattack on emergency alert system disrupts Spokane County operationsDisruption of operations related to the emergency alert system
Key incidents in other countries
Nike investigates security incident after claims of internal file leak
Impact: Claimed leak of 1.4TB, about 190,000 corporate files; authenticity unverified
World Leaks published files it claims to have stolen from Nike. The published material reportedly includes design and factory-related data, and Nike has launched an investigation into a potential security incident. The attackers' claim of 1.4TB, or about 190,000 corporate files, has not been independently verified.
Related reports: 17 · last report →Iranian state TV hacked to air footage backing exiled crown prince
Impact: Disruption of the state broadcaster's satellite transmission and airing of unauthorized footage and messages
The satellite broadcast of Iranian state TV was hacked, airing footage supporting exiled crown prince Reza Pahlavi and anti-government messages. The broadcast also included a message urging people not to point their weapons at the public.
Related reports: 7 →Database containing 149 million login credentials exposed online
149MImpact: More than 149 million login credentials; database of about 98GB
In January 2026, it was reported that a database of about 98GB containing more than 149 million login credentials, including usernames and passwords, had been exposed online. The exposed information included Gmail and Facebook login credentials.
Related reports: 4 · last report →Everest claims data theft from McDonald's India business
Impact: Alleged theft of 861GB of data
The Everest ransomware gang claimed to have stolen data from McDonald's India business. The attackers put the size of the stolen data at 861GB. The actual scale of damage and the company's response have not been confirmed.
Related reports: 3 · last report →Minnesota Department of Human Services breach exposes records of over 300,000
300KImpact: Records of more than 300,000 people
A data breach at the Minnesota Department of Human Services in the US affected the records of more than 300,000 people. This came to light in January 2026, and the specific date of the incident, the cause and response measures have not been confirmed.
Related reports: 2 · last report →