Week 23, 2026 security incident report
Hacking and data breach incidents newly reported 2026.06.01 ~ 06.07
New cybersecurity incidents recorded from June 1 to 7, 2026, numbered six in South Korea and 53 overseas, with personal data leaks the most common type at 38. In South Korea, the leak of BGF Networks' CU parcel delivery online member information was the most widely reported, with the leaked items including not only names, addresses and contact details but also passwords and connecting information (CI). The leak of personal data on some 60,000 staff at the Gyeonggi Provincial Office of Education's welfare center and the leak of member authorization and bank account information at ST Unitas also occurred, highlighting personal data damage across various industries including retail, logistics and education. Overseas, data leaks and operational disruptions occurred together, including the takeover of more than 20,000 Instagram accounts through abuse of a Meta AI support tool, the exposure of information on 600,000 households in Gaza by the World Food Programme, and class suspensions caused by ransomware at a high school.
By type
- Data breach35
- Hacking & intrusion16
- Ransomware4
- Malware1
Key incidents in South Korea
BGF Networks leaks personal data of CU parcel delivery online members
Impact: Online members' IDs, passwords, names, dates of birth, addresses, contact details, Connecting Information (CI), and more
BGF Networks, operator of the CU convenience store parcel delivery service, confirmed signs of unauthorized system access and a leak of online members' personal information on June 4, 2026. It said a hack exploiting a web vulnerability leaked IDs, passwords, names, dates of birth, addresses, contact details, and Connecting Information (CI), but did not include third-party information such as parcel recipients. The company apologized and advised users to change their passwords, and the Personal Information Protection Commission (PIPC) launched an investigation.
Related reports: 20 · last report →Hack of CU convenience store parcel service leaks members' names, addresses and phone numbers
Impact: Online members' names, IDs, addresses and mobile phone numbers leaked; scale under assessment
The CU convenience store parcel service was attacked by hackers, leaking personal information of online members. The leaked items included names, IDs, addresses and mobile phone numbers, and the scale of the damage is being assessed. The CU convenience store parcel service apologized, and police launched a preliminary investigation into the personal data leak.
Related reports: 19 · last report →Gyeonggi education office welfare center leaks data of over 60,000 staff
60KImpact: Personal information of more than 60,000 school staff
The welfare center of the Gyeonggi Provincial Office of Education sent an official document to the wrong recipients, leaking the personal information of more than 60,000 school staff. When the incident occurred and any follow-up measures have not been confirmed.
Read on 교육플러스 ↗Personal data leaks across sectors including TVING, Coupang, Duo and Ttareungi
Personal data leaks at TVING, Coupang, Duo and Ttareungi were examined together. Concerns were raised about personal data leaks spanning multiple sectors.
Read on 녹색경제신문 ↗ST Unitas hack leaks member authorization and account information
Impact: Member authorization information and account information
A hacking incident occurred at ST Unitas, operator of Yeongdangi. Member authorization information and account information were leaked, while when it occurred and the response have not been confirmed.
Read on 뉴스1 ↗
Key incidents in other countries
Abuse of Meta AI support tool leads to takeover of over 20,000 Instagram accounts
Impact: Takeover of more than 20,000 Instagram accounts
Attackers tricked Meta's AI support chatbot into granting them access to other users' Instagram accounts. Meta sent notifications to targeted users and took steps to protect the hacked accounts. The scale of the damage disclosed on June 8, 2026, was more than 20,000 accounts.
Related reports: 16 · last report →Ransomware halts classes at Evanston Township High School
Impact: Two-day school closure, cancellation of summer classes, sports camps and other activities, and relocation of the ACT test site
Evanston Township High School in the US closed for two days and canceled activities including summer classes and sports camps after a ransomware attack over the weekend. The school announced plans to reopen on Wednesday and decided not to schedule make-up days for canceled classes. As recovery continued, the ACT test site was moved to Lane Tech.
Related reports: 14 · last report →Eversource employee account hack exposes customer information
Impact: Customer information exposed
Eversource experienced a breach in April 2026 in which an employee account was hacked, exposing customer information. A state investigation found that the company failed to detect the breach for 13 days and became aware of it only after the hacker sent an email. In November, calls were made for an independent audit of the investigation and response, as well as stronger security.
Related reports: 7 · last report →WFP cyberattack exposes data on 600,000 Gaza households
Impact: Data on 600,000 aid-recipient households in Gaza
A cyberattack on the UN World Food Programme exposed data on 600,000 households receiving aid in Gaza. The World Food Programme investigated the data leak. The specific attack method and any further damage have not been confirmed.
Related reports: 5 · last report →Hacked Microsoft open-source tool used to spread malware
Impact: Theft of AI developers' passwords and distribution of malware to Claude and Gemini users
A Microsoft open-source tool was hacked and abused to steal AI developers' passwords. Malware was delivered to Claude and Gemini users, and Microsoft's open-source projects suffered a string of hacks. The specific scale of the damage and response measures have not been confirmed.
Related reports: 4 · last report →