Week 29, 2026 security incident report
Hacking and data breach incidents newly reported 2026.07.13 ~ 07.19
From July 13 to 19, five new incidents were recorded in South Korea, with the hack of the personal data access log management system of the Institute of Information & Communications Technology Planning & Evaluation (IITP) the most reported with four articles. Newsystock suffered a leak of personal data on about 40,000 members due to a compromised administrator account, Nike Korea launched a forensic investigation into a leak of some customers' personal data, and a claim that 425,000 Etoos Edu customer records were being sold has not been confirmed as an actual leak. Across all types in South Korea and abroad, personal data leaks were the most common at 33, and chain damage spreading from Quantum Health to Vandalia Rental, Exact Sciences Corporation, Alkegen and Kean University also stood out. Overseas, among 41 new incidents, ransomware damage at fairlife halted dairy production in the United States and resulted in data theft, while the leak of Ernst & Young clients' tax and financial information and the exposure of information from 55.3 million Suno user accounts also emerged as major incidents.
By type
- Data breach32
- Hacking & intrusion7
- Ransomware4
- Phishing & smishing1
Key incidents in South Korea
IITP's Personal Data Access Log Management System Hacked
The personal data access log management system at the Institute of Information & Communications Technology Planning & Evaluation was hacked in July 2026. The incident came seven months after a previous hack, and work was carried out to determine whether researchers' personal data had been leaked.
Related reports: 4 · last report →Nike Korea launches forensic investigation after some customers' personal data leaked
Impact: Personal data of some customers leaked
Some customers' personal data was leaked at Nike Korea. The company brought in security experts to conduct a forensic investigation and strengthened its security measures. The scope of the leak's impact is under investigation.
Related reports: 3 · last report →Newsystock admin account breach leaks data of 40,000 members
40KImpact: Personal data of about 40,000 members
At Newsystock, an administrator account was compromised through a phishing email, leaking the personal data of about 40,000 members. Indications that the company failed to detect the leak for four months and internal control problems came to light.
Related reports: 2 →Hacker claims to be selling 425,000 Etoos customer records
425KImpact: Claimed sale of 425,000 customer records; leak unconfirmed
A hacker claimed to be selling 425,000 Etoos customer records. Etoos Edu said an internal review found no signs of a leak.
Read on 데일리시큐 ↗Attention turns to severity of hacking-related sanctions on Dunamu, KT and others
Tension grew among companies ahead of hacking-related sanctions. The severity of sanctions on Dunamu and KT emerged as a focus of attention.
Read on 부산일보 ↗
Supply-chain breaches
Quantum Health breach exposes personal data and medical records of about 184,000
184KImpact: Personal information and medical records of about 184,000 people
The personal information and medical records of about 184,000 people were exposed at Quantum Health. The leaked information included Social Security numbers, and attorneys launched an investigation into the incident.
Related reports: 2 →
Also affected: 4- Vandalia RentalAttorneys investigate claims of Vandalia Rental data leak
- Exact Sciences CorporationInvestigation into claims of Exact Sciences Corporation data leak
- AlkegenAlkegen Social Security numbers leaked in fallout from Quantum Health incidentSocial Security numbers leaked; scale of damage unknown
- Kean UniversityAttorneys investigate claims of Kean University data leak
Key incidents in other countries
Coca-Cola's Fairlife halts U.S. production after ransomware attack
Impact: Halt of dairy production in the U.S. and data theft
Fairlife, a Coca-Cola subsidiary, was hit by a ransomware attack and halted dairy production in the United States. Coca-Cola confirmed that data was stolen and said on July 27 that production had resumed. After the ransom was refused, Anubis's publication of the data was reported, and in August a class action over the incident was filed.
Related reports: 61 · last report →Hack of Ernst & Young's external support system exposes client tax data
Impact: Client personal information including tax and financial data and Social Security numbers
Ernst & Young's external IT support ticketing platform was hacked, exposing clients' personal information including tax and financial data and Social Security numbers. Ernst & Young disclosed the breach and launched an investigation, and a class action lawsuit was later filed. ShinyHunters claimed responsibility for the attack and threatened to release the stolen data.
Related reports: 22 · last report →Lawyers investigate suspected Hillebrand Home Health data breach
Lawyers have begun investigating a suspected data breach at Hillebrand Home Health. Whether a breach is confirmed, the type and scale of the information affected and the organization's response have not been confirmed.
Related reports: 10 · last report →Estée Lauder data breach linked to Oracle EBS vulnerability
A data breach linked to an Oracle E-Business Suite vulnerability occurred at Estée Lauder. The company disclosed the impact of the breach, and the scale of the leak has not been confirmed.
Related reports: 7 · last report →Suno hack exposes data of 55.3 million user accounts
Impact: Information from 55.3 million user accounts
AI music platform Suno was hacked, exposing information from 55.3 million user accounts. Following the hack, Suno's scraping of YouTube and Deezer came to light along with the customer data leak.
Related reports: 7 · last report →