Week 7, 2026 security incident report
Hacking and data breach incidents newly reported 2026.02.09 ~ 02.15
From February 9 to 15, 2026, three new incidents were recorded in South Korea, with signs of a hack at Samkwang and concerns over the leak of 452 GB of internal data standing out for the potential scale of the data leak. DDoS attacks on Shinhan Bank and Hana Financial Group prompted an advisory for the financial sector, and Mega MGC Coffee denied any external leak of customer data while correcting inadequate data management. By type, hacking/intrusion (14) and personal data leaks (10) dominated. Overseas, of 26 new incidents, the leak of personal data of about 6.2 million people at Dutch telecom operator Odido and the leak of data on about 1 million customers following a phishing breach at Figure stood out, while SmarterTools suffered a ransomware breach through a vulnerability in its own mail product.
By type
- Hacking & intrusion14
- Data breach10
- Ransomware3
- DDoS1
- Phishing & smishing1
Key incidents in South Korea
Mega MGC Coffee denies external leak of customer data, fixes management lapses
Mega MGC Coffee said there had been no external leak of customer information. It said it had immediately finished correcting shortcomings in how the information was managed.
Read on 뉴스1 ↗DDoS attacks on Shinhan Bank and Hana Financial prompt alert for financial sector
A Muslim hacking group attacked Shinhan Bank and Hana Financial. A DDoS alert was issued for the financial sector, while the date of the attacks, whether services were disrupted and the extent of the damage have not been confirmed.
Read on 보안뉴스 ↗Signs of hack at Samkwang raise fears of 452GB internal data leak
Impact: Concerns over leak of 452GB of internal data
Signs of a hack were raised at electronics and components manufacturer Samkwang. There are concerns that 452GB of internal data may have leaked, but whether data was actually leaked, when the incident occurred and what response was taken have not been confirmed.
Read on 뉴스저널리즘 ↗
Key incidents in other countries
Dutch Telecom Odido Breach Exposes Data of 6.2 Million Customers
6.2MImpact: Personal data of about 6.2 million customers
Dutch telecom operator Odido warned on February 12 that a cyberattack had exposed the personal data of about 6.2 million customers. The leaked data included names, addresses, contact details, IBANs, dates of birth and ID-related information. After the company refused to pay, the attackers began publishing the stolen data, and police tracked a suspected local accomplice during the investigation.
Related reports: 7 · last report →Figure phishing breach exposes data of about 1 million customers
1MImpact: Customer data of about 1 million people
Blockchain-based lender Figure confirmed a breach via phishing and a leak of customer data. ShinyHunters claimed the attack and published data including names, addresses, dates of birth and phone numbers. Figure said a limited number of files were affected, but the scale of the breach was later reported at about 1 million people.
Related reports: 6 · last report →Photo ID app leak believed to affect more than 150,000 users
150KImpact: Estimated data leak affecting more than 150,000 users
User data was leaked from photo ID apps, with more than 150,000 users estimated to be affected. The specific apps involved, the timing of the leak and response measures have not been confirmed.
Related reports: 3 · last report →SmarterTools hit by ransomware via flaw in its own mail product
Impact: Twelve office Windows servers and a secondary data center for testing, QA and hosting affected
The Warlock ransomware group broke into the internal network of developer SmarterTools through an unpatched SmarterMail virtual machine. Twelve Windows servers on the office network and a secondary data center used for testing, quality assurance and hosting were affected.
Related reports: 3 →European Commission cyber breach exposes staff information
Impact: Staff information exposed
A cyber breach at the European Commission exposed staff information. The Commission disclosed the breach and is investigating the cyberattack.
Related reports: 2 →