Vulnpocalypse: Incidents in South Koreahttps://vulnpocalypse.dev/feeds/Breaches and advisories naming victims in South Korea.enThu, 12 Nov 2026 16:59:02 +0000RansomLook reports obsoft ransomware group lists South Korean Company #5https://vulnpocalypse.dev/advisories/ransomlook-reports-obsoft-ransomware-group-lists-south-korean-company-5/https://vulnpocalypse.dev/advisories/ransomlook-reports-obsoft-ransomware-group-lists-south-korean-company-5/Tue, 10 Nov 2026 12:00:00 +0000RansomLook reports the obsoft ransomware group lists a South Korean site as Company #5; the victim's position is not confirmed, so await its notice.breachObsoft ransomware group claims Korean victim ui****gb****n.**.krhttps://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-korean-victim-uigbnkr/https://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-korean-victim-uigbnkr/Tue, 10 Nov 2026 12:00:00 +0000RansomLook reports the obsoft ransomware group lists a South Korean site as a victim, the claim is unconfirmed, so verify with the organization.breachObsoft ransomware group claims attack on South Korean organizationhttps://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-south-korean-organization/https://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-south-korean-organization/Tue, 10 Nov 2026 12:00:00 +0000RansomLook says obsoft lists a masked South Korean site as a victim; unconfirmed, so check your own exposure if it is yours.breachObsoft ransomware group claims attack on South Korean Company #2https://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-south-korean-company-2/https://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-south-korean-company-2/Tue, 10 Nov 2026 12:00:00 +0000RansomLook says the obsoft group lists South Korean Company #2 on its leak site; unconfirmed, so check your own exposure.breachObsoft ransomware group claims attack on a South Korean companyhttps://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-a-south-korean-company/https://vulnpocalypse.dev/advisories/obsoft-ransomware-group-claims-attack-on-a-south-korean-company/Tue, 10 Nov 2026 12:00:00 +0000RansomLook reports the obsoft ransomware group lists a South Korean company on its leak site; the victim has not confirmed it.breachDataBreaches.net reports South Korea presidential office meeting over data leakhttps://vulnpocalypse.dev/advisories/databreachesnet-reports-south-korea-presidential-office-meeting-over-data-leak/https://vulnpocalypse.dev/advisories/databreachesnet-reports-south-korea-presidential-office-meeting-over-data-leak/Tue, 03 Nov 2026 12:00:00 +0000DataBreaches.net reports South Korea's presidential office met over a leak of personal data of the president and trip entourage; watch updates.breachBithumb, Daishin Securities and Mirae Asset report hacks in new South Korean financial breach wavehttps://vulnpocalypse.dev/advisories/bithumb-daishin-securities-and-mirae-asset-report-hacks-in-new-south-korean-fina/https://vulnpocalypse.dev/advisories/bithumb-daishin-securities-and-mirae-asset-report-hacks-in-new-south-korean-fina/Wed, 28 Oct 2026 12:00:00 +0000Bithumb, Daishin Securities and Mirae Asset reported hacking incidents on Oct 28, 2026, with Daishin confirming exposed customer contact data; root cause isbreachDaishin Securities: account-opening linked server breached, 38,490 customers' data leakedhttps://vulnpocalypse.dev/advisories/daishin-securities-account-opening-linked-server-breached-38490/https://vulnpocalypse.dev/advisories/daishin-securities-account-opening-linked-server-breached-38490/Wed, 28 Oct 2026 12:00:00 +0000Daishin Securities said personal and credit information of 38,490 customers leaked, covering eight items.breachBithumb: outsourced internal mobile groupware hacked, employee and 844 customers' data leakedhttps://vulnpocalypse.dev/advisories/bithumb-outsourced-internal-mobile-groupware-hacked-employee-and-844/https://vulnpocalypse.dev/advisories/bithumb-outsourced-internal-mobile-groupware-hacked-employee-and-844/Wed, 28 Oct 2026 12:00:00 +0000Bithumb said an outside party hacked its internal mobile groupware for about an hour on the morning of 27 Oct.breachYonsei University (Seoul): portal breach exposes data of about 10,000 students and graduateshttps://vulnpocalypse.dev/advisories/yonsei-university-seoul-portal-breach-exposes-data-of-about-10000/https://vulnpocalypse.dev/advisories/yonsei-university-seoul-portal-breach-exposes-data-of-about-10000/Thu, 22 Oct 2026 12:00:00 +0000Per Korea JoongAng Daily, personal information of around 10,000 students and graduates leaked, including student ID numbers, mobile numbers and email...breachLazarus "Operation FlashHole" against South Korean firmshttps://vulnpocalypse.dev/advisories/lazarus-operation-flashhole-against-south-korean-firms/https://vulnpocalypse.dev/advisories/lazarus-operation-flashhole-against-south-korean-firms/Wed, 21 Oct 2026 12:00:00 +0000Kaspersky: at least three South Korean organizations (construction, software, wire-communication equipment) targeted since at least July 2025.breachKorea National Health Insurance Service: employee sold subscriber data for about 2.5 years; victims not notifiedhttps://vulnpocalypse.dev/advisories/korea-national-health-insurance-service-employee-sold-subscriber-data/https://vulnpocalypse.dev/advisories/korea-national-health-insurance-service-employee-sold-subscriber-data/Fri, 16 Oct 2026 12:00:00 +0000Per Medigate News, at a 16 Oct National Assembly audit lawmaker Kim Ki-woong raised the case of an NHIS employee who provided subscriber and dependent...breachYoido Full Gospel Church and SaRang Church (Seoul): member data found on attacker's overseas serverhttps://vulnpocalypse.dev/advisories/yoido-full-gospel-church-and-sarang-church-seoul-member-data-found-on/https://vulnpocalypse.dev/advisories/yoido-full-gospel-church-and-sarang-church-seoul-member-data-found-on/Wed, 07 Oct 2026 12:00:00 +0000Yoido Full Gospel Church said it identified a dataset with personal information associated with about 850,000 members (The Record).breachKB Kookmin Bank (Korea): employee mobile work system breached, 119 then 2,210 people affectedhttps://vulnpocalypse.dev/advisories/kb-kookmin-bank-korea-employee-mobile-work-system-breached-119-then/https://vulnpocalypse.dev/advisories/kb-kookmin-bank-korea-employee-mobile-work-system-breached-119-then/Fri, 02 Oct 2026 12:00:00 +0000KB Kookmin said on 2 Oct that names, phone numbers, addresses and encrypted resident registration numbers of 119 customers were exposed via an employee...breachHana Bank (Korea): sales support system breached, 89 customers' data leakedhttps://vulnpocalypse.dev/advisories/hana-bank-korea-sales-support-system-breached-89-customers-data-leaked/https://vulnpocalypse.dev/advisories/hana-bank-korea-sales-support-system-breached-89-customers-data-leaked/Fri, 02 Oct 2026 12:00:00 +0000Hana Bank disclosed on 2 Oct that personal information of 89 customers, including resident registration numbers, names, addresses, emails, phone numbers...breachShinhan Bank (Korea): authentication bypass exposes about 25,000 customers' income and loan datahttps://vulnpocalypse.dev/advisories/shinhan-bank-korea-authentication-bypass-exposes-about-25000/https://vulnpocalypse.dev/advisories/shinhan-bank-korea-authentication-bypass-exposes-about-25000/Thu, 01 Oct 2026 12:00:00 +0000Shinhan Bank apologised after personal information of about 25,000 customers, including names, phone numbers, annual income and loan eligibility limits...breachSouth Korea National Tax Service: seized wallet's seed phrase published in a press photohttps://vulnpocalypse.dev/advisories/south-korea-national-tax-service-seized-wallets-seed-phrase-published/https://vulnpocalypse.dev/advisories/south-korea-national-tax-service-seized-wallets-seed-phrase-published/Thu, 26 Feb 2026 12:00:00 +000026 Feb 2026: an NTS press release about raids on 124 tax evaders included an unredacted photo of a seized Ledger device and its handwritten recovery phrase.breach