Week 10, 2026 security incident report

Personal data of 647 major donors leaked at Community Chest of Korea

647Impact: Personal information of 647 major donors

Personal information of 647 major donors, including entertainers and politicians, was leaked at the Community Chest of Korea. The Community Chest of Korea reported the incident to the Personal Information Protection Commission (PIPC) and apologized. Questions were subsequently raised about its personal data management procedures.

Hope Bridge exposes personal data of about 1,600 donors

1.6KImpact: Names, resident registration numbers and donation amounts of about 1,600 donors

Hope Bridge posted financial statements without redacting donors' names, resident registration numbers and donation amounts, exposing the personal information of about 1,600 people for about 20 days. The association discovered this in an internal audit on February 25, 2026, and deleted the posting. Relevant authorities launched an investigation, and the Ministry of the Interior and Safety began an emergency inspection.

International ransomware group claims Hyundai Elevator hack

An international ransomware group claimed to have successfully hacked Hyundai Elevator. The claim came to light on March 8, and whether a breach actually occurred, the scale of the damage and the company's response have not been confirmed.

No damages awarded in 400,000-person data leak despite company negligence

400KImpact: Personal data of 400,000 people leaked

In a case involving the leak of personal data of 400,000 people, the company's negligence was recognized but no damages were awarded. The ruling of the Supreme Court was covered; the company's name, the date of the leak, its cause and response measures have not been confirmed.

Signs of hacking found in Yeosu-Suncheon unauthorized card payment case

Unauthorized card payments occurred in Yeosu and Suncheon. Police found signs of hacking in connection with the case.

Signs of hacking at Aju Pharm, hacker claims internal data theft

Signs of hacking have emerged at Aju Pharm, a subsidiary of Aju Holdings. A hacker claimed to have stolen internal data; whether data was actually stolen, the scale of the damage and response measures have not been confirmed.

Court rules pseudonymized dog farm audit data still a personal data leak

A flood of protest calls followed over a nationwide map of dog farms. A court ruled that even pseudonymized National Assembly audit data on dog farms constituted a personal data leak. The specific scale of the leak and the date it occurred have not been confirmed.

LexisNexis hack leaks legacy data and customer records

Impact: Legacy data and some customer records leaked

LexisNexis's legal and professional information division was breached, resulting in unauthorized access to legacy data and some customer records. The attackers published stolen files and claimed to have also accessed data on government and law firm users. LexisNexis said it had confirmed the breach and contained the threat.

FBI surveillance system breach exposes phone numbers

Impact: Phone numbers of surveillance targets exposed

The FBI's surveillance system was hacked, exposing the phone numbers of surveillance targets. A China-linked attack is suspected, and the possibility of intrusion through the supply chain has also been raised. The White House assisted with the investigation, and the FBI classified the incident as a major cyber incident and notified Congress.

TriZetto breach exposes health and personal data of over 3.4 million

3.4MImpact: Health and personal information of more than 3.4 million people

Health and personal information of more than 3.4 million people was leaked from Cognizant's TriZetto Provider Solutions. The company confirmed that the data had been stolen. The specific intrusion method, the date of the incident and further response measures have not been confirmed.

Israel's hack of Iranian surveillance camera network tied to military operations

Impact: Breach of Iran's surveillance and traffic camera networks

Israel hacked Iran's surveillance camera network. The hacking of Tehran traffic cameras and U.S. intelligence were used in an operation to assassinate Iran's Supreme Leader, and cyber operations including the hijacking of TV broadcasts also supported the war with Iran.

Madison Square Garden hack results in data breach

Madison Square Garden confirmed a data breach several months after being attacked by hackers. A class action lawsuit over the data breach was later filed, and the company was cleared of the related lawsuit in July 2026.