Week 31, 2026 security incident report
Hacking and data breach incidents newly reported 2026.07.27 ~ 08.02
In South Korea, the WEMIX hack, in which 5.22 million WEMIX Dollar tokens were abnormally issued and assets worth about 7.7 billion won were stolen, was the most prominent incident. Amid hacking concerns raised by South Korea's first stablecoin security incident involving a game company, a leak of member personal data occurred at Cheonryong CC. By type across South Korea and abroad, personal data leaks were the most common at 32, followed by hacking/intrusions and ransomware at 12 each. Overseas, notable damage included attacks on water utilities in seven U.S. states and the targeting of more than 100 systems, the theft of more than $130 million in crypto assets from Coldcard wallets, and a patient data leak and the closure of 10 facilities at AnMed.
By type
- Data breach31
- Ransomware12
- Hacking & intrusion11
- DDoS1
- Phishing & smishing1
Key incidents in South Korea
WEMIX hack leads to abnormal issuance of 5.22 million WEMIX Dollar
Impact: 5.22 million WEMIX Dollar abnormally issued, worth about 7.7 billion won
In July 2026, a hack at WEMIX led to the abnormal issuance of 5.22 million WEMIX Dollar, worth about 7.7 billion won. The attacker exploited a smart contract vulnerability to seize administrator privileges, and the price of WEMIX Dollar crashed 99%. WEMIX froze assets and, in August, announced compensation of about 1.6 billion won, equal to the full amount of the losses.
Related reports: 16 · last report →WEMIX Dollar hack steals about 7.7 billion won in assets
Impact: WEMIX Dollar worth about 7.7 billion won stolen
In July 2026, WEMIX Dollar was hacked and assets worth about 7.7 billion won were stolen. An attack exploiting a code error in an unused program was identified as the cause, and Wemade fully suspended its bridge. In August, it confirmed it would pay compensation of about 1.6 billion won in full.
Related reports: 8 · last report →Security incident at South Korea's first game-company stablecoin raises hacking concerns
A security incident occurred involving South Korea's first stablecoin issued by a game company. The incident raised hacking concerns about won-denominated stablecoins as well.
Read on 서울경제 ↗Cheonryong CC member personal data leaked
Impact: Member personal information
Personal information of Cheonryong CC members was leaked. Cheonryong CC apologized for the leak.
Read on 아시아투데이 ↗
Key incidents in other countries
Cyberattacks on water systems spread to seven U.S. states
Impact: Water systems in seven U.S. states attacked and more than 100 systems targeted
In July 2026, water systems in several U.S. states, including Minnesota, came under cyberattack. Initially more than 30 locations in Minnesota were reported as targets; the scope later widened to seven states, and more than 100 internet-exposed water systems were found to have been targeted. The Federal Bureau of Investigation opened an investigation, and the possible involvement of Iran-linked hacking groups was raised.
Related reports: 79 · last report →Coldcard wallet hack leads to large-scale Bitcoin theft
Impact: More than $130 million in crypto assets
Coldcard crypto wallets were hacked and Bitcoin was stolen on a large scale, with a flaw in seed generation blamed as the cause of the attack. Estimated losses rose to more than $130 million as of August 7. In September, 52.37 Bitcoin recovered by a white-hat hacker were placed in a recovery trust.
Related reports: 23 · last report →AnMed ransomware attack leaks patient data and closes facilities
Impact: Patient data leaked and 10 facilities closed
AnMed was hit by a ransomware attack that leaked patient information and disrupted facility operations. During recovery it set up a telephone line for patients, and 10 facilities remained closed after the attack. The chief executive later apologized and confirmed the data leak.
Related reports: 16 · last report →Unauthorized system access at Analog Devices exposes customer personal data
Impact: Customer personal data
Semiconductor company Analog Devices suffered a data breach resulting from unauthorized access to its systems. The company disclosed the breach after assessing hackers' claims of an intrusion and said its operations were not affected. The leaked information included customers' personal data.
Related reports: 10 · last report →Bank of Baroda employee email breach leaks customer records in India
Customer data from India's Bank of Baroda was leaked online, reportedly involving a breach of an employee email account. The attacker claimed to have stolen 1TB of data. The bank confirmed a cyber incident on July 28, and the actual scale of the leak has not been confirmed.
Related reports: 7 · last report →