Week 13, 2026 security incident report

Defense Ministry audits leak of data on 759 Marine Corps civilian employees

759Impact: Information of 759 civilian employees

The information of 759 civilian employees of the Republic of Korea Marine Corps was leaked. Defense Minister Ahn Gyu-back ordered a rigorous audit, and the Ministry of National Defense launched the audit itself.

Exploited security flaw in Jinhaksa's Catch leaks seven types of member data

Impact: Seven types of member information

From March 20 to 23, 2026, member information was leaked from Jinhaksa's recruitment platform Catch through unauthorized access exploiting a security vulnerability in a specific CatchCampus page. The seven types of data leaked included gender, date of birth, mobile phone number, address, email, ID, and internal member management data. The company suspended the page and applied a security patch.

Government Employees Pension Service fined over personal data leak

A personal data leak occurred at the Government Employees Pension Service (GEPS). The Personal Information Protection Commission (PIPC) imposed a fine of 532 million won on the agency in connection with the leak. The timing, scale, and cause of the leak have not been confirmed.

Signs of hack at webtoon platform Toomics

Signs of a hack have emerged at webtoon platform Toomics. Concerns were raised about the security of 60 million members' information, but whether data was actually leaked and the extent of the damage have not been confirmed.

Signs of hack and data theft at KISWIRE

Signs of a hack and data theft have emerged at KISWIRE. The specific extent of the damage and the response have not been confirmed.

Malware disguised as KakaoTalk PC installer infects more than 5,000 computers

Impact: More than about 5,000 PCs infected

Distribution of Winos4.0 malware disguised as the KakaoTalk PC installer was confirmed to have infected more than about 5,000 PCs. The attackers placed fake download sites at the top of search results. The malware captured screens, collected system information, and downloaded additional malware.

Hanam warns of Telegram hacking after impersonator of mayor demands 80 million won

In a case linked to Telegram hacking, someone impersonating the mayor of Hanam demanded 80 million won. Hanam City urged caution against Telegram hacking.

Signs of leak and sale of Democratic Party's Yeosu B dues-paying member roster

Impact: Roster of Yeosu B dues-paying members

Signs have emerged that the roster of dues-paying members of the Democratic Party of Korea's Yeosu B constituency was leaked and traded. The indications have sparked controversy.

MSI Daebu leaks personal data following NR Capital Daebu

Following NR Capital Daebu, personal information was also leaked from MSI Daebu. The scale of the leak, the timing, the cause, and the response have not been confirmed.

FBI Director Kash Patel's personal email hacked, files leaked

Impact: Personal email, photos and documents leaked

The personal email account of FBI Director Kash Patel was hacked, and photos and documents were posted online. An Iran-linked hacker group claimed the attack, and the FBI confirmed the hack of the personal email. No government data was compromised, and the U.S. offered a $10 million reward for the hackers.

European Commission cloud breach leaks EU institutions' data

Impact: Data of 30 EU institutions exposed

The cloud infrastructure of the European Commission's Europa.eu web platform was breached and data was stolen. ShinyHunters claimed responsibility for the attack and published more than 90GB of files, while the Commission said its internal systems were not affected. Data from 30 EU institutions was subsequently exposed, and the incident was confirmed to be linked to the Trivy supply chain attack.

Ransomware breach at Germany's Left Party leads to theft of internal data

Impact: Theft of internal data

Germany's Left Party (Die Linke) discovered a breach suspected to be a Qilin ransomware attack and shut down its IT infrastructure. It later confirmed data theft, and the attackers threatened to leak the data. The extent of the impact on internal data was under investigation, and the party said its membership register was not affected.

Ajax confirms fan data leak and season ticket management vulnerability

20Impact: Confirmed viewing of emails of several hundred fans and personal data of fewer than 20 banned individuals

Ajax confirmed that the emails of several hundred fans and the personal data of fewer than 20 people banned from the stadium had been viewed. The vulnerability made it possible to access the data of more than 300,000 registered fans, transfer season tickets and change stadium bans. In May, a suspect connected to the case was arrested.

Sensitive data leaked from anonymous crime and school tip systems

Impact: Sensitive student information and other data; 93GB of tip data according to the hackers' claims

It came to light that sensitive student information and other data from anonymous crime and school tip systems had fallen into the hands of hackers. The hackers claimed to have hacked 93GB of anonymous crime tip data. The Portland Police Bureau advised the use of alternative tip channels, and US senators demanded answers about the data leak from school tip systems.