Week 17, 2026 security incident report

Malware on Lee & Lee CC website leaks data of over 100,000 customers

100KImpact: Up to nine personal data items of more than 100,000 customers

Malware was planted on the Lee & Lee CC website, leaking up to nine data items, including names, dates of birth and contact details, of more than 100,000 customers. Questions were raised about gaps in detection and response after the club notified customers six months after the leak. Police are investigating the possibility that a North Korean hacking group was behind it.

Court ruling anonymization error leaks personal data

Impact: Personal data in court rulings, including some resident registration numbers

An error in the anonymization of court rulings leaked personal data, including some resident registration numbers. The courts belatedly discovered the leak and urgently deleted the data, and the Supreme Court apologized.

Online access to court rulings suspended after partial personal data leak

Impact: Partial leak of names, addresses and resident registration numbers in court rulings

Some personal data, including names, addresses and resident registration numbers, was leaked from court rulings. Online access to court rulings was suspended.

BBQ data leak case expands into perjury trial

The BBQ data leak case expanded into a perjury trial. Park Hyun-jong was named as a key figure in the related trial.

South Korean Supreme Court rules on legal status of insurance agent who leaked customer data

Impact: Customer information leaked

South Korea's Supreme Court ruled that an insurance agent who leaked customer information cannot be considered a personal information controller. The time of the leak, the scale of damage and the insurer involved could not be confirmed.

Mimi suffers personal data leak

Impact: Leak of Mimi's personal data

Mimi was affected by a personal data leak. The specific leak path, time of occurrence and response could not be confirmed.

Three companies sanctioned for personal data leaks

Three companies that leaked personal data were sanctioned. Concerns were raised about the exposure of the leaked personal data on the dark web.

Consumer data leak escalates into security crisis in South Korea-US relations

Impact: Consumer data leak

A consumer data leak escalated into a national security crisis in South Korea-US relations. The company affected, the scale of the leak, the time of occurrence and the specific response have not been confirmed.

Citizens Bank customer data leaked in third-party breach

Impact: Customers' personal data including Social Security numbers and contact details

Citizens Bank customers' personal data was exposed in a third-party data breach. The leaked data included Social Security numbers and contact details. Two federal lawsuits were filed against the bank after the incident.

Cyberattack on French secure documents agency portal leaks personal data

Impact: Personal data of portal users

The portal of France's National Agency for Secure Documents (ANTS) was hit by a cyberattack that leaked users' personal data. The French Interior Ministry confirmed the leak, and a phishing warning was subsequently issued.

U.S. energy and water management company Itron's internal network breached

Itron, a U.S. energy and water management company, disclosed a breach of its internal IT network. Unauthorized access to internal systems was confirmed, while the specific scale of the damage and response measures have not been disclosed.

Tampered Checkmarx developer tools distribute info-stealing malware

Impact: Data theft and distribution of malicious versions of developer tools

Checkmarx KICS Docker images and VS Code and Open VSX extensions were tampered with to distribute malware that collects secrets from development environments. The attack code was designed to steal cloud credentials, GitHub and npm tokens, SSH keys and more, and the company confirmed that data had been stolen. Malicious versions were later also distributed for the Jenkins AST plugin, and the company advised users to use safe versions and released a new plugin.

France's ANTS ID document portal hacked, data leak feared

A portal of France's ANTS for identity documents was hit by a cyberattack, raising the possibility of a data leak. The attack method, scale of the damage and specific recovery measures have not been confirmed.