■ Insurance Agency Hacking Incident

• Causes of Personal Information Leakage: Exposure of administrator account information in the sales support system

• Outcome: Malware infection in the computing solution → Potential for widespread damage to multiple solutions

• Issues:

  • Holding a large amount of sensitive personal information, such as policyholders' health data

  • Risk of large-scale chain damage due to the use of the same solution among different companies

  • Concerns about additional hacking incidents due to poor management of internal administrator accounts

■ Telecom Company SIM Information Leakage Incident

• Causes of Personal Information Leakage: Infiltration of stealth malware (BPFDoor) into the core server 'Home Subscriber Server (HSS)' managing subscriber information

• Outcome: Circumstances suggesting leakage of SIM (USIM) related personal information (phone numbers, unique identifiers, etc.)

• Issues:

  • Use of stealth malware that goes undetected for extended periods

  • Suspected association with a specific APT group → Concerns of ongoing and organized additional attacks

  • Risk of serious secondary damage such as identity theft and financial fraud

■ K Company Human Resources Information System Hacking Incident

• Causes of Personal Information Leakage: Comprehensive breach of human resources information system

• Outcome: Massive leakage of sensitive personal information of over 7,000 employees

  • Exposure of encrypted basic information (name, date of birth, last four digits of social security number, email, password, address, bank account number, phone number, etc.) + unencrypted employee photos, ID copies, bankbook copies, employment contracts, salary information, signature information, family relationship certificates, resident registration copies, marriage relationship certificates, etc.

• Issues:

  • Beyond simple personal information, exposure of sensitive public documents

  • Concerns of serious secondary damage such as identity theft and voice phishing

As seen, recent hacking incidents not only inconvenience individuals but also cause serious social and economic damages. Especially for institutions handling sensitive information, such as telecom companies, or services connected to multiple systems, a single vulnerability can lead to significant security damage to the entire enterprise.