Week 14, 2026 security incident report
Hacking and data breach incidents newly reported 2026.03.30 ~ 04.05
From March 30 to April 5, 2026, the launch of an investigation into the Baemin customer data leak and the company's official apology emerged as the main story in South Korea. Business People also suffered a personal data leak that included corporate clients, meaning both new incidents in South Korea were personal data leaks. Across all types, personal data leaks were again the most common at 40, and chain damage spreading from Mercor to Meta Platforms, Inc. was also confirmed. Overseas, incidents included order and shipping disruptions at Hasbro, the leak of medical information on about 3.7 million patients at CareCloud, the theft of about $280 million in crypto assets from Drift, the distribution of remote-control malware through the Axios supply chain, and ransomware damage to a server at a Minot water treatment plant.
By type
- Data breach36
- Hacking & intrusion19
- Ransomware11
- Malware2
Key incidents in South Korea
Investigation launched into Baemin customer data leak; company issues formal apology
Customer information was leaked from Baemin. The Personal Information Protection Commission (PIPC) considered launching an investigation on March 30, 2026, and on March 31 the launch of the investigation and Baemin's formal apology were confirmed.
Related reports: 2 · last report →BusinessPeople personal data leak includes corporate clients
Impact: Leak of personal information, including corporate clients
Personal information was leaked from BusinessPeople. Corporate clients were among those affected by the leak.
Read on 연합뉴스TV ↗
Supply-chain breaches
Mercor data breach raises fears of leaked AI company training data
Mercor said it was hit by a cyberattack linked to the compromise of the open-source LiteLLM project. Concerns were raised that the data breach could leak confidential training-related information of major AI companies. Meta temporarily suspended its work with Mercor following the breach.
Related reports: 2 · last report →
Also affected: 1
Key incidents in other countries
Hasbro Cyberattack Disrupts Order and Shipping Operations
Impact: Disruption to order and shipping operations
Hasbro suffered a cyberattack in March 2026 that affected its order and shipping operations. The company said recovery could take several weeks and investigated the possibility of a data leak. The attack was later reported to have stemmed from vishing and social engineering techniques.
Related reports: 15 · last report →CareCloud hack exposes medical data of about 3.7 million patients
3.7MImpact: Medical records, Social Security numbers and banking information of about 3.7 million patients
It became known in March 2026 that a hacker had stolen patient medical records from medical software company CareCloud. The leaked data included medical information, Social Security numbers and banking information. The company informed the US Securities and Exchange Commission of the possible breach and began notifying victims, and in August the scale of the damage grew to about 3.7 million people.
Related reports: 14 · last report →Massive crypto theft in hack of DeFi platform Drift
Impact: $280 million in crypto assets confirmed stolen; a separate tally of $285 million also exists
Crypto assets were stolen from Drift, a Solana-based DeFi platform, and deposits and withdrawals were suspended. Drift confirmed $280 million in stolen funds, while a separate tally put the losses at $285 million. The attack was attributed to a six-month social engineering operation linked to North Korea, and Tether subsequently moved to support customer repayments and the resumption of services.
Related reports: 14 · last report →Axios supply chain attack spreads remote access malware
Impact: Distribution of remote access malware targeting Mac, Windows and Linux
The open-source library Axios was hijacked and used to distribute remote access malware targeting Mac, Windows and Linux. The attack was attributed to North Korea-linked hackers. AI deepfake lures and fake Microsoft Teams troubleshooting instructions were reportedly used to take over a maintainer's account.
Related reports: 8 · last report →Ransomware attack hits Minot water treatment plant servers in the US
Impact: Ransomware damage to water treatment plant servers
Servers at the water treatment plant in Minot, North Dakota, were hit by a ransomware attack in March. Tap water remained safe after the attack. The FBI launched an investigation, and the city manager also explained the situation.
Related reports: 7 · last report →