{ "type": "bundle", "id": "bundle--4f801fbc-f883-4a1b-833a-e6961bf505bc", "objects": [ { "type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": { "tlp": "white" } }, { "type": "identity", "spec_version": "2.1", "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "SecurityStudies.info", "identity_class": "organization", "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--844054d6-b0c7-5424-b1c7-f1972d901723", "created": "2026-11-12T06:04:37.080Z", "modified": "2026-11-13T00:02:47.896Z", "name": "Xen Orchestrator authentication bypass actually exploited... virtualization hosts can also be compromised", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: exploitation. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/xen-orchestrator-authentication-bypass-actually-exploited-virtualizati-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209467", "description": "젠 오케스트라 인증 우회 실제 악용…가상화 호스트까지 장악 가능" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "South Korea", "country": "KR" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--e20224ff-a634-5e21-8c05-e68b0466645b", "created": "2026-11-12T06:04:37.080Z", "modified": "2026-11-12T06:04:37.080Z", "relationship_type": "related-to", "source_ref": "incident--844054d6-b0c7-5424-b1c7-f1972d901723", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--625789ea-a4bb-5a91-88c0-6a13de35295c", "created": "2026-11-12T12:05:12.116Z", "modified": "2026-11-13T00:02:47.901Z", "name": "'National functions continue even if hacked'... Pan-government task force for national cyber resilience launched", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: intrusion; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/national-functions-continue-even-if-hacked-pan-government-task-force-f-20261112/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147225", "description": "“해킹당해도 국가 기능은 지속”... 국가 사이버복원력 범정부 TF 출범" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe2e8d66-f493-5ec9-81e3-f1fbb0055778", "created": "2026-11-12T12:05:12.116Z", "modified": "2026-11-12T12:05:12.116Z", "relationship_type": "related-to", "source_ref": "incident--625789ea-a4bb-5a91-88c0-6a13de35295c", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-13T00:02:47.913Z", "name": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Nov 12, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. EU member states named: Belgium. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/s-korea-belgium-discuss-leak-of-personal-data-of-president-lee-europe-20261112/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261112009400315", "description": "S. Korea, Belgium discuss leak of personal data of President Lee, Europe trip entourage" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "high" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Belgium", "country": "BE" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6692a9e8-8886-5adb-8af8-4f4cc75610ff", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--f8de1409-c8bc-547e-863c-07817401d9a2", "description": "country named in the coverage" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1e3add33-ccec-5cc1-8bc0-cf85dee13c3a", "created": "2026-11-12T12:05:12.127Z", "modified": "2026-11-12T12:05:12.127Z", "relationship_type": "related-to", "source_ref": "incident--40279790-6861-5d1d-b2f0-eaf5a0bed0c1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-13T00:02:47.933Z", "name": "Virtual asset exchange Flybit hacked, resident registration numbers and tax information of 40 customers leaked", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: cryptocurrency theft; sectors: cryptocurrency. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/virtual-asset-exchange-flybit-hacked-resident-registration-numbers-and-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209490", "description": "가상자산 거래소 플라이빗 해킹, 고객 40명 주민등록번호·납세정보 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f7dfb38c-4a9f-5855-bba0-72a67be129c1", "created": "2026-11-12T12:05:12.145Z", "modified": "2026-11-12T12:05:12.145Z", "relationship_type": "related-to", "source_ref": "incident--1c798eeb-711e-5886-ac2a-27b51d553ea7", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a94f11e5-d1e1-5264-8e5a-03cffabbf3c3", "created": "2026-11-12T06:04:37.067Z", "modified": "2026-11-13T00:02:47.881Z", "name": "Personal information leaked at Secta9ine, a subsidiary of 'Happy Point operator' SPC Group", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-information-leaked-at-secta9ine-a-subsidiary-of-happy-point-o-20261112/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147199", "description": "‘해피포인트 운영사’ SPC그룹 산하 섹타나인 개인정보 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1f2c1cf8-2d95-55b3-ae97-77390b1eaa35", "created": "2026-11-12T06:04:37.067Z", "modified": "2026-11-12T06:04:37.067Z", "relationship_type": "related-to", "source_ref": "incident--a94f11e5-d1e1-5264-8e5a-03cffabbf3c3", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0fe09d1e-3cdf-56f4-ab93-88c4e7a7a8da", "created": "2026-11-12T12:05:12.153Z", "modified": "2026-11-13T00:02:47.938Z", "name": "150,000 personal records leaked in hacking of 4 Samyang Group companies... includes 80,000 resident registration numbers", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/150000-personal-records-leaked-in-hacking-of-4-samyang-group-companies-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209475", "description": "삼양그룹 4개사 해킹으로 개인정보 15만명 유출…주민번호 8만여건 포함" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--aaa4c7c8-673c-5c7a-8eeb-41dd3c5f7f63", "created": "2026-11-12T12:05:12.153Z", "modified": "2026-11-12T12:05:12.153Z", "relationship_type": "related-to", "source_ref": "incident--0fe09d1e-3cdf-56f4-ab93-88c4e7a7a8da", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d9037bfa-2852-5f77-8336-ed9dcf8c7a4f", "created": "2026-11-12T18:04:29.487Z", "modified": "2026-11-13T00:02:47.955Z", "name": "Samsung SDS subsidiary Multicampus hacked, personal information of about 70,000 employees leaked", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 12, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/samsung-sds-subsidiary-multicampus-hacked-personal-information-of-abou-20261112/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209491", "description": "삼성SDS 자회사 멀티캠퍼스 해킹, 임직원 개인정보 약 7만명 유출" } ], "x_securitystudies_occurred_on": "2026-11-12", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--aca78e9a-62a7-516b-9440-3a24a8216360", "created": "2026-11-12T18:04:29.487Z", "modified": "2026-11-12T18:04:29.487Z", "relationship_type": "related-to", "source_ref": "incident--d9037bfa-2852-5f77-8336-ed9dcf8c7a4f", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0ff2b99c-8c6e-5ff0-bd18-89c102769cb2", "created": "2026-11-11T12:23:36.572Z", "modified": "2026-11-13T00:02:47.834Z", "name": "Government conducts ex officio investigation into GS E&C over 'Xi' resident information leak... first case decided after deliberation", "description": "Detected automatically from 2 articles in 2 outlets (Boannews (Korean), Dailysecu (Korean)), Nov 11 to Nov 12, 2026. Title machine-translated from Korean. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/gs-20261111/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147194", "description": "정부, ‘자이’ 입주민 정보 유출 GS건설 직권조사... 심의 거쳐 결정 첫 사례" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209460", "description": "GS건설 아파트 입주민 개인정보 유출…정부 조사에 동의 안 했다가 첫 직권조사 대상" } ], "x_securitystudies_occurred_on": "2026-11-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f1fa7194-5afa-5265-88e4-87e6fff2ba9f", "created": "2026-11-11T12:23:36.572Z", "modified": "2026-11-11T12:23:36.572Z", "relationship_type": "related-to", "source_ref": "incident--0ff2b99c-8c6e-5ff0-bd18-89c102769cb2", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--bb4fe31b-4eab-5dc9-b98e-67c903001271", "created": "2026-11-10T16:32:08.764Z", "modified": "2026-11-13T00:02:47.788Z", "name": "Hanil Networks hit by ransomware attack... 'Blocked immediately, no data leakage'", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: ransomware. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-3/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147152", "description": "한일네트웍스 랜섬웨어 공격받아... “즉시 차단, 유출 피해 없어”" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0e9c9827-1e80-52f5-a052-7e253d9b89c3", "created": "2026-11-10T16:32:08.764Z", "modified": "2026-11-10T16:32:08.764Z", "relationship_type": "related-to", "source_ref": "incident--bb4fe31b-4eab-5dc9-b98e-67c903001271", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-13T00:02:47.801Z", "name": "Financial Security Institute reports data leak following hacking attack", "description": "Detected automatically from 7 articles in 3 outlets (Boannews (Korean), Dailysecu (Korean), Yonhap), Nov 10 to Nov 12, 2026. Type: data breach; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-4/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147156", "description": "금융보안원, 해킹으로 정보 유출... 금융위 등 신고" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010600315", "description": "Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261110010651315", "description": "(LEAD) Financial Security Institute reports data leak following hacking attack" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209438", "description": "[단독] 금융보안원 상시평가시스템 해킹 정황...금융사 내부정보 유출 기업에 통보 중인 것으로 확인" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147183", "description": "금보원 해킹, ‘가짜 금감원 계정’ 만들어 침투했다... ‘마스킹’ 없는 개인정보 유출 가능성도" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209448", "description": "[이슈 체크-1] 금융보안원 상시평가 시스템 해킹…공격자, 금감원 수준의 접근 권한 확보" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209450", "description": "인증기관 '디지서트' 내부 시스템 해킹…고객 업무 연락처 및 일부 여권·면허증 유출" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--27384d79-23f9-5b71-8b91-2ba99c5c7cd9", "created": "2026-11-10T16:32:08.774Z", "modified": "2026-11-10T16:32:08.774Z", "relationship_type": "related-to", "source_ref": "incident--4fa495ac-36d0-5e1d-8001-31d1616dc9e1", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-13T00:02:47.776Z", "name": "Phishing notification sent impersonating parking app 'Get your reward'... External agency breached", "description": "Detected automatically from 1 article in 1 outlet (Boannews (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: data breach; sectors: government, technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/phishing-notification-sent-impersonating-parking-app-get-your-reward-e-20261110/" }, { "source_name": "Boannews (Korean)", "url": "https://www.boannews.com/news/articleView.html?idxno=147150", "description": "주차장 앱 사칭 “보상 받으세요” 피싱 알림톡 보내... 외부 대행사 뚫려" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--931c350e-bc63-5681-9473-398129015822", "created": "2026-11-11T20:35:30.065Z", "modified": "2026-11-11T20:35:30.065Z", "relationship_type": "related-to", "source_ref": "incident--6d10bffe-3813-5392-abaf-c644104cd87d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--0371b784-ac08-5e1b-ad1a-e17f618ef9bd", "created": "2026-11-10T16:32:08.753Z", "modified": "2026-11-13T00:02:47.770Z", "name": "ZoomZoom Tour, personal information leaked due to hacking and development errors... travel schedules and companion information also exposed", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 10, 2026. Title machine-translated from Korean. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/incident-20261110-2/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209422", "description": "줌줌투어, 해킹·개발 오류로 개인정보 유출…여행 일정·동행자 정보까지 노출" } ], "x_securitystudies_occurred_on": "2026-11-10", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--42bcad80-78ac-5472-8797-2698f5cc6b4e", "created": "2026-11-10T16:32:08.753Z", "modified": "2026-11-10T16:32:08.753Z", "relationship_type": "related-to", "source_ref": "incident--0371b784-ac08-5e1b-ad1a-e17f618ef9bd", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-13T00:02:47.695Z", "name": "SonicWall SSL-VPN authentication bypass vulnerability exploited in actual attacks, multi-factor authentication also neutralized", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: exploitation. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "exploitation", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/sonicwall-ssl-vpn-authentication-bypass-vulnerability-exploited-in-act-20261109/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209394", "description": "소닉월 SSL-VPN 인증 우회 취약점 실제 공격에 악용, 다중인증도 무력화" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fe97fcb5-287d-56c6-a798-914b08267c23", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-11T20:35:29.928Z", "relationship_type": "related-to", "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "vulnerability", "id": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6", "created": "2026-11-13T05:15:33.953Z", "modified": "2026-11-13T05:15:33.953Z", "name": "CVE-2026-19868", "external_references": [ { "source_name": "cve", "external_id": "CVE-2026-19868" } ], "description": "SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--fa591481-207c-519e-a125-a9c868ca1360", "created": "2026-11-11T20:35:29.928Z", "modified": "2026-11-11T20:35:29.928Z", "relationship_type": "related-to", "source_ref": "incident--1bc09e60-d48b-59ff-9227-e5d911f09a5f", "target_ref": "vulnerability--502a9f8f-a5b4-5afc-abed-dfd1c77c5cd6", "description": "vulnerability exploited" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--76188bea-6560-56fa-b585-e9fb1cc8e389", "created": "2026-11-11T20:35:29.936Z", "modified": "2026-11-13T00:02:47.700Z", "name": "Ransomware group N0n claims to have hacked company related to Korean smart TV advertising data", "description": "Detected automatically from 1 article in 1 outlet (Dailysecu (Korean)), Nov 9, 2026. Title machine-translated from Korean. Type: ransomware. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ransomware", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ransomware-group-n0n-claims-to-have-hacked-company-related-to-korean-s-20261109/" }, { "source_name": "Dailysecu (Korean)", "url": "https://www.dailysecu.com/news/articleView.html?idxno=209395", "description": "랜섬웨어 조직 N0n, 한국 스마트TV 광고 데이터 관련 기업 해킹 주장" } ], "x_securitystudies_occurred_on": "2026-11-09", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--c65dbd8c-f48a-5ef5-b645-610a713dfc5d", "created": "2026-11-11T20:35:29.936Z", "modified": "2026-11-11T20:35:29.936Z", "relationship_type": "related-to", "source_ref": "incident--76188bea-6560-56fa-b585-e9fb1cc8e389", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-13T00:02:47.668Z", "name": "Mirae Asset says data breaches exposed customer, employee information", "description": "Detected automatically from 4 articles in 3 outlets (ETCISO (Economic Times), The Korea Herald, Yonhap), Nov 6 to Nov 9, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea, India. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/mirae-asset-says-data-breaches-exposed-customer-employee-information-20261106/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000400315", "description": "Mirae Asset says data breaches exposed customer, employee information" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261107000451315", "description": "(LEAD) Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10929242", "description": "Personal info of some 39,000 leaked from Mirae Asset Securities" }, { "source_name": "ETCISO (Economic Times)", "url": "https://ciso.economictimes.indiatimes.com/news/data-breaches/personal-info-of-39000-persons-leaked-from-mirae-asset-securities/135669047", "description": "Personal info of 39,000 persons leaked from Mirae Asset Securities" } ], "x_securitystudies_occurred_on": "2026-11-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--095279bc-69f1-5155-a576-8cfad052b57e", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "India", "country": "IN" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8730a6a4-1342-5393-ac9d-7cfd7315a152", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--095279bc-69f1-5155-a576-8cfad052b57e", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--65a71513-9667-5cbf-8f43-633d1647f9aa", "created": "2026-11-10T16:32:08.678Z", "modified": "2026-11-10T16:32:08.678Z", "relationship_type": "related-to", "source_ref": "incident--6eb20c15-2e94-5172-8c2c-bb1d822f59b8", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-13T00:02:47.646Z", "name": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns", "description": "Detected automatically from 2 articles in 2 outlets (Check Point Research, Microsoft Threat Intelligence), Nov 5 to Nov 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea, Hong Kong, Thailand, Cambodia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hacking-on-autopilot-inside-artex-cybercrime-campaigns-20261105/" }, { "source_name": "Check Point Research", "url": "https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/", "description": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns" }, { "source_name": "Microsoft Threat Intelligence", "url": "https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/", "description": "ARTEX abuse expands as cybercriminals target financial sector" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Hong Kong", "country": "HK" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--ef85cfba-0238-5680-aea1-65608ed33612", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--d5d32a33-2c36-553a-b6c6-1eeb931fa5f2", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Cambodia", "country": "KH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b12a351-49f3-59e1-9cc0-9a00ca31b2c8", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--045a1890-e799-520f-8119-ae91e4fb69bb", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2990eb21-033c-5af2-8a5b-46e23b3cb343", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "location", "id": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "created": "2026-11-10T00:00:00.000Z", "modified": "2026-11-10T00:00:00.000Z", "name": "Thailand", "country": "TH" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--7985a9d6-9e8b-57bc-9e3e-2829147cbdd9", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "created": "2026-11-09T04:30:05.339Z", "modified": "2026-11-09T04:30:05.339Z", "name": "Storm-0940", "aliases": [ "CovertNetwork-1658", "ORB07" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/storm-0940/" } ], "description": "Storm-0940 is a Chinese threat actor active since at least 2021, known for gaining initial access through password spray and brute-force attacks, as well as exploiting network edge applications. Microsoft has observed Storm-0940 utilizing valid credentials obtained from CovertNetwork-1658's password spray operations, indicating a close operational relationship between the two. Once inside a victim environment, Storm-0940 has been seen leveraging compromised credentials for further malicious activities. Additionally, Storm-0940 has employed botnets, such as Quad7, to facilitate password spraying attacks." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--1999587e-b927-574f-9ab1-fa9a82d2d58e", "created": "2026-11-10T16:32:08.658Z", "modified": "2026-11-10T16:32:08.658Z", "relationship_type": "related-to", "source_ref": "incident--e5be2210-f7e1-562b-8dc6-5c8f93a6d26a", "target_ref": "intrusion-set--835a37e4-da90-5154-9b53-7211e062dfb6", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-13T00:02:47.614Z", "name": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc-20261105/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261105002400320", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261105/over-470000-pieces-of-personal-data-leaked-from-37-financial-firms-fsc?utm_source=rss", "description": "Over 470,000 pieces of personal data leaked from 37 financial firms: FSC" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8e42941a-da17-54fb-bad4-649fed864700", "created": "2026-11-10T16:32:08.632Z", "modified": "2026-11-10T16:32:08.632Z", "relationship_type": "related-to", "source_ref": "incident--146c35ff-de36-5c8d-8d30-3156bd41522c", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--fa0dbed4-0d63-5915-a7d0-05565b659847", "created": "2026-11-10T16:32:08.644Z", "modified": "2026-11-13T00:02:47.630Z", "name": "Most gov't agencies deny using VirusTotal, deepening questions over presidential data leak", "description": "Detected automatically from 1 article in 1 outlet (Korea Times), Nov 5, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/most-govt-agencies-deny-using-virustotal-deepening-questions-over-pres-20261105/" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/politics/20261105/most-govt-agencies-deny-using-virustotal-deepening-questions-over-presidential-data-leak?utm_source=rss", "description": "Most gov't agencies deny using VirusTotal, deepening questions over presidential data leak" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--daf20925-aa00-57b1-ac84-0e2e0d08cc1d", "created": "2026-11-10T16:32:08.644Z", "modified": "2026-11-10T16:32:08.644Z", "relationship_type": "related-to", "source_ref": "incident--fa0dbed4-0d63-5915-a7d0-05565b659847", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-13T00:02:47.640Z", "name": "South Korea investigates 580 finance firms over data leaks, issues warning", "description": "Detected automatically from 1 article in 1 outlet (South China Morning Post), Nov 5, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warn-20261105/" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/week-asia/economics/article/3373363/south-korea-investigates-580-finance-firms-over-data-leaks-issues-warning", "description": "South Korea investigates 580 finance firms over data leaks, issues warning" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--720105e2-e7a9-541f-9c34-19722663917d", "created": "2026-11-10T16:32:08.652Z", "modified": "2026-11-10T16:32:08.652Z", "relationship_type": "related-to", "source_ref": "incident--19d01182-8092-5d15-a580-fa1c61784bf5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c18c6e86-d995-5834-b867-fa6f0dc7a52d", "created": "2026-11-12T06:04:36.840Z", "modified": "2026-11-13T00:02:47.624Z", "name": "Foreign ministry looking to contractor over presidential personal info leak", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 5, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/foreign-ministry-looking-to-contractor-over-presidential-personal-info-20261105/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10927143", "description": "Foreign ministry looking to contractor over presidential personal info leak" } ], "x_securitystudies_occurred_on": "2026-11-05", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--3982744e-7383-5af6-b09f-bb44f02b6a06", "created": "2026-11-12T06:04:36.840Z", "modified": "2026-11-12T06:04:36.840Z", "relationship_type": "related-to", "source_ref": "incident--c18c6e86-d995-5834-b867-fa6f0dc7a52d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d8b0252a-827c-5bb5-802f-2ae6612a6f9e", "created": "2026-11-10T16:32:08.583Z", "modified": "2026-11-13T00:02:47.570Z", "name": "Cheong Wa Dae orders probes into data leak of Lee, aides, security guards", "description": "Detected automatically from 2 articles in 1 outlet (The Korea Herald), Nov 3, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cheong-wa-dae-orders-probes-into-data-leak-of-lee-aides-security-guard-20261103/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10923743", "description": "Cheong Wa Dae orders probes into data leak of Lee, aides, security guards" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10924108", "description": "Seoul races to contain data leak exposing Lee, his aides and bodyguards" } ], "x_securitystudies_occurred_on": "2026-11-03", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--0a01b020-2f89-5b41-9e01-c8baf4437b73", "created": "2026-11-10T16:32:08.583Z", "modified": "2026-11-10T16:32:08.583Z", "relationship_type": "related-to", "source_ref": "incident--d8b0252a-827c-5bb5-802f-2ae6612a6f9e", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--ca649294-37b3-58a6-b905-21498e809401", "created": "2026-11-10T16:32:08.548Z", "modified": "2026-11-13T00:02:47.531Z", "name": "Personal information of Lee, presidential staff leaked: report", "description": "Detected automatically from 11 articles in 6 outlets (Hankyoreh, NHK, New Talk, South China Morning Post, The Korea Herald, Yonhap), Nov 2 to Nov 4, 2026. Type: data breach; sectors: government. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-information-of-lee-presidential-staff-leaked-report-20261102/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261102013200320", "description": "Personal information of Lee, presidential staff leaked: report" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261102013251320", "description": "(LEAD) Personal information of Lee, presidential staff leaked: report" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103003700315", "description": "Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10923757", "description": "Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103003751315", "description": "(LEAD) Presidential office holds emergency meeting over leak of personal data of president, trip entourage" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/asia/east-asia/article/3373065/south-korea-rushes-reissue-passports-president-lee-wife-after-data-leak", "description": "South Korea rushes to reissue passports to President Lee, wife after data leak" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-03/1069015", "description": "長達逾5個月！ 李在明護照資料遭公開 韓國政府急善後..." }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261103010400315", "description": "Main opposition slams presidential office for leak of Lee's personal data" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261103de70007", "description": "韓国大統領や高官の個人情報流出 イ大統領パスポート再発行へ" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_national/1285585.html", "description": "Passport numbers of Lee, 167 others leaked in presidential jet data breach" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_national/1285767.html", "description": "Foreign Ministry employee likely behind presidential jet passenger data leak" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government" ], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6dbd0ffd-b3ab-5689-9e97-81680954e607", "created": "2026-11-10T16:32:08.548Z", "modified": "2026-11-10T16:32:08.548Z", "relationship_type": "related-to", "source_ref": "incident--ca649294-37b3-58a6-b905-21498e809401", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-13T00:02:47.491Z", "name": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Nov 2, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/data-on-16000-people-compromised-at-3-seoul-international-schools-in-p-20261102/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10922866", "description": "Data on 16,000 people compromised at 3 Seoul international schools in PowerSchool breach" } ], "x_securitystudies_occurred_on": "2026-11-02", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b2088c25-b5a3-528a-9f1c-4988b1251b92", "created": "2026-11-10T16:32:08.529Z", "modified": "2026-11-10T16:32:08.529Z", "relationship_type": "related-to", "source_ref": "incident--78090cc0-ec70-5383-bd05-b8d09a7067e2", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1936f227-2555-556b-92d4-7f48f4860626", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-13T00:02:47.432Z", "name": "Binance TH pauses crypto transfers, says Thai funds safe after hack", "description": "Detected automatically from 34 articles in 16 outlets (Channel News Asia, Daily NK, Free Malaysia Today, Hankyoreh, Japan Today, Liberty Times and others), Oct 30 to Nov 12, 2026. Type: cryptocurrency theft; sectors: cryptocurrency, technology. Asia-Pacific countries affected: South Korea, Thailand. Largest figure in the headlines: 200,000,000,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "crypto_theft", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/binance-th-pauses-crypto-transfers-says-thai-funds-safe-after-hack-20261030/" }, { "source_name": "The Thaiger", "url": "https://thethaiger.com/news/business/binance-th-pauses-crypto-transfers-after-hack", "description": "Binance TH pauses crypto transfers, says Thai funds safe after hack" }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/north-korean-actors-steal-6-36b-from-binance-in-largest-crypto-theft-in-history/", "description": "North Korean actors steal $6.36B from Binance in largest crypto theft in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-10-30/1068375", "description": "金將軍又缺錢？ 幣安2千多億加密貨幣遭駭創歷來之最 北韓遭認是兇手" }, { "source_name": "Liberty Times", "url": "https://ec.ltn.com.tw/article/breakingnews/5624143", "description": "史上最大駭客攻擊！幣安遭竊逾2000億 美分析指向北韓" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000200315", "description": "N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000251315", "description": "(LEAD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261031000252315", "description": "(2nd LD) N. Korean hackers blamed for record US$6.36 bln Binance cryptocurrency theft: U.S. firm" }, { "source_name": "Japan Today", "url": "https://japantoday.com/category/world/hackers-steal-6.3-billion-from-binance-in-record-heist-blamed-on-north-korea4", "description": "Hackers steal $6.3 billion from Binance in record heist blamed on North Korea" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921226", "description": "N. Korean hackers blamed for record $6.3b Binance cryptocurrency theft: US firm" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000300315", "description": "FBI says N. Korea responsible for over US$6 bln crypto theft from Binance" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/01/tech/binance-hack-fbi-north-korea/", "description": "FBI blames North Korea for $6 billion Binance crypto hack" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3372858/fbi-blames-north-korea-stolen-billions-binance-biggest-hack-history", "description": "FBI blames North Korea for stolen billions from Binance in biggest hack in history" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-01/1068564", "description": "幣安逾60億美元資產遭竊　FBI指北韓所為" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921526", "description": "FBI says N. Korea responsible for over $6b crypto theft from Binance" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261101de69102", "description": "暗号資産大手バイナンスへのサイバー攻撃 FBI“北朝鮮が関与”" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10921777", "description": "North Korean cyberterrorism gains renewed scrutiny after record Binance heist" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261101000351315", "description": "(LEAD) Trump says U.S. will talk to N. Korea if it is behind Binance hack" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/business/2026/11/01/fbi-says-north-korea-behind-us-6bil-crypto-theft-from-binance", "description": "FBI says North Korea behind US$6bil crypto theft from Binance" }, { "source_name": "Taipei Times", "url": "https://www.taipeitimes.com/News/biz/archives/2026/11/02/2003866975", "description": "N Korea behind US$6bn crypto theft, FBI says" }, { "source_name": "New Talk", "url": "https://newtalk.tw/news/view/2026-11-02/1068750", "description": "20分鐘盜逾60億美元加密貨幣! 北韓駭客疑感情詐騙滲透幣安工程師 川普這樣說...." }, { "source_name": "NK Pro", "url": "https://www.nknews.org/pro/fbi-confirms-north-korea-behind-record-6-36b-binance-crypto-heist/", "description": "FBI confirms North Korea behind record $6.36B Binance crypto heist" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/business/2026/11/02/binance-outflows-north-korea-hack/", "description": "Binance outflows hit $4.7 billion after record North Korea hack" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_northkorea/1285383.html", "description": "FBI identifies North Korean hackers as responsible for unprecedented Binance breach" }, { "source_name": "NK News", "url": "https://www.nknews.org/2026/11/kim-yo-jong-denies-north-korean-involvement-in-6b-binance-crypto-theft/", "description": "Kim Yo Jong denies North Korean involvement in $6B Binance crypto theft" }, { "source_name": "Channel News Asia", "url": "https://www.channelnewsasia.com/east-asia/north-korea-binance-hack-fbi-grave-provocation-6514311", "description": "North Korea slams FBI allegations over Binance hack as 'grave' provocation" }, { "source_name": "The Japan Times", "url": "https://www.japantimes.co.jp/news/2026/11/03/asia-pacific/north-korea-binance-us-hacking/", "description": "North Korea calls U.S. claims it was behind Binance hack ‘a grave political provocation’" }, { "source_name": "Free Malaysia Today", "url": "https://www.freemalaysiatoday.com/category/world/2026/11/03/n-korea-slams-fbi-allegations-over-binance-hack-as-grave-provocation", "description": "N. Korea slams FBI allegations over Binance hack as ‘grave’ provocation" }, { "source_name": "South China Morning Post", "url": "https://www.scmp.com/news/world/united-states-canada/article/3373050/sister-north-koreas-kim-slams-fbis-binance-hack-allegations-grave-provocation", "description": "Sister of North Korea’s Kim slams FBI’s Binance hack allegations as ‘grave’ provocation" }, { "source_name": "VN Express", "url": "https://vnexpress.net/trieu-tien-dap-tra-cao-buoc-tan-cong-mang-binance-tu-fbi-5139936.html", "description": "Triều Tiên đáp trả cáo buộc 'tấn công mạng Binance' từ FBI" }, { "source_name": "NHK", "url": "https://news.web.nhk/newsweb/na/nd-20261103de69881", "description": "世界的な暗号資産取引所へのサイバー攻撃　北朝鮮が関与否定" } ], "x_securitystudies_occurred_on": "2026-10-30", "x_securitystudies_severity": 5, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Cryptocurrency", "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--2dc31aa3-0df9-5ff5-8935-df97ac69a0c9", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--8d42d050-12da-57fe-addc-71e86dc8ac78", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "location--14de3cce-749c-5917-9e8b-93dfde8f4e13", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "intrusion-set", "id": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "created": "2026-11-09T04:30:05.217Z", "modified": "2026-11-09T04:30:05.217Z", "name": "TraderTraitor", "aliases": [ "Jade Sleet", "Pukchong", "UNC4899" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/actors/tradertraitor/" } ], "description": "TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity." }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--55952837-5ab0-5bcc-b705-b0d57744ac9d", "created": "2026-11-10T16:32:08.478Z", "modified": "2026-11-10T16:32:08.478Z", "relationship_type": "related-to", "source_ref": "incident--1936f227-2555-556b-92d4-7f48f4860626", "target_ref": "intrusion-set--6d1328a3-2c4d-5dbf-8ff6-4cae78790d3a", "description": "actor named in the coverage (the sources' attribution)" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--1d3d53c2-5120-59b0-9f4c-da41554bdc2a", "created": "2026-11-10T16:32:08.444Z", "modified": "2026-11-12T06:04:36.657Z", "name": "Hundreds of customers' personal information at Bithumb leaked in hacks", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Oct 29, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/hundreds-of-customers-personal-information-at-bithumb-leaked-in-hacks-20261029/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261029012000320", "description": "Hundreds of customers' personal information at Bithumb leaked in hacks" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10919604", "description": "Hundreds of customers' personal information at Bithumb leaked in hacks" } ], "x_securitystudies_occurred_on": "2026-10-29", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--6e19c79f-fd1f-5c4f-ba87-66f4164efbba", "created": "2026-11-10T16:32:08.444Z", "modified": "2026-11-10T16:32:08.444Z", "relationship_type": "related-to", "source_ref": "incident--1d3d53c2-5120-59b0-9f4c-da41554bdc2a", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-11T20:40:49.652Z", "name": "(LEAD) South Korean financial firms confirm data breach of customer data", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 28, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-south-korean-financial-firms-confirm-data-breach-of-customer-data-20261028/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261028002751320", "description": "(LEAD) South Korean financial firms confirm data breach of customer data" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b26d2c67-00b1-5985-9df0-fd5921c0f423", "created": "2026-11-10T16:32:08.393Z", "modified": "2026-11-10T16:32:08.393Z", "relationship_type": "related-to", "source_ref": "incident--b67d48ad-cdf3-518c-b49d-661bcd4202fb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-11T20:40:49.665Z", "name": "Cyberattack wave widens across Korean financial sector", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 28, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/cyberattack-wave-widens-across-korean-financial-sector-20261028/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10917639", "description": "Cyberattack wave widens across Korean financial sector" } ], "x_securitystudies_occurred_on": "2026-10-28", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b4336c73-68ab-58b9-aff1-a55e7890b9df", "created": "2026-11-10T16:32:08.407Z", "modified": "2026-11-10T16:32:08.407Z", "relationship_type": "related-to", "source_ref": "incident--a68f78aa-d5fa-5a5f-a8e7-521e5f41a6c0", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-11T20:40:49.600Z", "name": "KB Kookmin Bank finds 2,091 more people affected by data leak", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Oct 26, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/kb-kookmin-bank-finds-2091-more-people-affected-by-data-leak-20261026/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261026010200315", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10915394", "description": "KB Kookmin Bank finds 2,091 more people affected by data leak" } ], "x_securitystudies_occurred_on": "2026-10-26", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--76b68e3c-f5cc-5924-bc4c-a0b2dbbf84dd", "created": "2026-11-10T16:32:08.345Z", "modified": "2026-11-10T16:32:08.345Z", "relationship_type": "related-to", "source_ref": "incident--4231ab55-afda-5056-8c62-4cdbc68dc149", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-11T20:40:49.526Z", "name": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates", "description": "Detected automatically from 2 articles in 2 outlets (Korea Times, Yonhap), Oct 22, 2026. Type: data breach; sectors: education. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/yonsei-univ-portal-hack-leaks-data-of-10000-students-graduates-20261022/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261022003300315", "description": "Yonsei Univ. portal hack leaks data of 10,000 students, graduates" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/education/20261022/yonsei-university-portal-hack-leaks-data-of-10000-students-graduates?utm_source=rss", "description": "Yonsei University portal hack leaks data of 10,000 students, graduates" } ], "x_securitystudies_occurred_on": "2026-10-22", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Education" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--cf57080e-ea93-536f-8908-4c3ecea74e3d", "created": "2026-11-10T16:32:08.287Z", "modified": "2026-11-10T16:32:08.287Z", "relationship_type": "related-to", "source_ref": "incident--3117d446-07fc-5cac-b4a4-9d4df3f2dced", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--8d643df4-4a20-5724-8407-3df507b05528", "created": "2026-11-10T16:32:08.208Z", "modified": "2026-11-11T20:40:49.416Z", "name": "2.76 mln pieces of customers' info at Hollys leaked in cyberattack", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 19, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Largest figure in the headlines: 2,760,000. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/276-mln-pieces-of-customers-info-at-hollys-leaked-in-cyberattack-20261019/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261019008600320", "description": "2.76 mln pieces of customers' info at Hollys leaked in cyberattack" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--bd2b7969-b30b-52cf-a6b4-eb2628c7d6e3", "created": "2026-11-10T16:32:08.208Z", "modified": "2026-11-10T16:32:08.208Z", "relationship_type": "related-to", "source_ref": "incident--8d643df4-4a20-5724-8407-3df507b05528", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-11T20:40:49.409Z", "name": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 19, 2026. Type: other; sectors: technology. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-makes-cyberattacks-cheaper-harder-to-ignore-cloudflare-executive-20261019/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10907396", "description": "AI makes cyberattacks cheaper, harder to ignore: Cloudflare executive" } ], "x_securitystudies_occurred_on": "2026-10-19", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Technology" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--a7ec611e-106a-5fcd-bc63-a7d589c31af3", "created": "2026-11-10T16:32:08.203Z", "modified": "2026-11-10T16:32:08.203Z", "relationship_type": "related-to", "source_ref": "incident--39a545b7-cdf8-58b1-bd4d-bb1335c83983", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-11T20:40:49.389Z", "name": "Top bank chiefs face grilling over cyberattacks", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 18, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/top-bank-chiefs-face-grilling-over-cyberattacks-20261018/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10906198", "description": "Top bank chiefs face grilling over cyberattacks" } ], "x_securitystudies_occurred_on": "2026-10-18", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b03b86b1-17c6-5d21-93db-0ba5bb4b1756", "created": "2026-11-10T16:32:08.185Z", "modified": "2026-11-10T16:32:08.185Z", "relationship_type": "related-to", "source_ref": "incident--96ac254c-4bea-5df2-a746-5f42e95e5e1d", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-11T20:40:49.312Z", "name": "Personal info presumed to have leaked from 16 financial institutions: regulator", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 14, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/personal-info-presumed-to-have-leaked-from-16-financial-institutions-r-20261014/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261014006900320", "description": "Personal info presumed to have leaked from 16 financial institutions: regulator" } ], "x_securitystudies_occurred_on": "2026-10-14", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--5befa658-ee9d-5594-9f90-c11bee7ee5d9", "created": "2026-11-10T16:32:08.122Z", "modified": "2026-11-10T16:32:08.122Z", "relationship_type": "related-to", "source_ref": "incident--6221fecc-3d64-5ef6-a6ef-a1f25237b97b", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:40:20.469Z", "name": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 11, 2026. Type: ddos; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "ddos", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/ai-powered-attacks-on-korean-financial-sectors-linked-to-chinese-ddos-20261011/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10898597", "description": "AI-powered attacks on Korean financial sectors linked to Chinese DDoS group: report" } ], "x_securitystudies_occurred_on": "2026-10-11", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--59232b12-3a82-524b-86f9-b024681123d6", "created": "2026-11-10T16:32:08.076Z", "modified": "2026-11-10T16:32:08.076Z", "relationship_type": "related-to", "source_ref": "incident--d6468d56-d3a3-50ad-b9e9-c5ab7907faa9", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a738999a-f2b0-5880-ba7f-6aaae536cea4", "created": "2026-11-10T16:32:08.019Z", "modified": "2026-11-10T16:40:20.419Z", "name": "Coupang files lawsuits against 620 bln-won fine over data leak", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 8, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/coupang-files-lawsuits-against-620-bln-won-fine-over-data-leak-20261008/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261008008700320", "description": "Coupang files lawsuits against 620 bln-won fine over data leak" } ], "x_securitystudies_occurred_on": "2026-10-08", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--856314ea-e003-53c3-9319-562106fe2866", "created": "2026-11-10T16:32:08.019Z", "modified": "2026-11-10T16:32:08.019Z", "relationship_type": "related-to", "source_ref": "incident--a738999a-f2b0-5880-ba7f-6aaae536cea4", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:40:20.409Z", "name": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks", "description": "Detected automatically from 1 article in 1 outlet (Hankyoreh), Oct 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "espionage", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/online-only-lenders-kakaobank-and-kbank-are-latest-targets-of-cyberatt-20261007/" }, { "source_name": "Hankyoreh", "url": "https://www.hani.co.kr/arti/english_edition/e_business/1281364.html", "description": "Online-only lenders KakaoBank and Kbank are latest targets of cyberattacks on Korean banks" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 4, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--9b735b72-62fa-5c94-980b-26bd9658327a", "created": "2026-11-10T16:32:08.007Z", "modified": "2026-11-10T16:32:08.007Z", "relationship_type": "related-to", "source_ref": "incident--27acc24b-612d-5aeb-8722-ac242eefbaeb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--a8b50939-898c-5419-aafa-598548ea4742", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:40:20.376Z", "name": "Multiple IPs used to hide origin of recent cyberattacks against financial firms", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 7, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/multiple-ips-used-to-hide-origin-of-recent-cyberattacks-against-financ-20261007/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261007005000315", "description": "Multiple IPs used to hide origin of recent cyberattacks against financial firms" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--081f6066-cb7b-5414-9b9e-323d0cb28f43", "created": "2026-11-10T16:32:07.969Z", "modified": "2026-11-10T16:32:07.969Z", "relationship_type": "related-to", "source_ref": "incident--a8b50939-898c-5419-aafa-598548ea4742", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--c869f62c-9995-5dd5-a470-cf8eed935deb", "created": "2026-11-10T16:32:07.964Z", "modified": "2026-11-10T16:40:20.371Z", "name": "Two mega churches hit by suspected data breaches", "description": "Detected automatically from 1 article in 1 outlet (The Korea Herald), Oct 7, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/two-mega-churches-hit-by-suspected-data-breaches-20261007/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10895635", "description": "Two mega churches hit by suspected data breaches" } ], "x_securitystudies_occurred_on": "2026-10-07", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--b0e0b9f2-e27c-5240-af26-87257270aeb1", "created": "2026-11-10T16:32:07.964Z", "modified": "2026-11-10T16:32:07.964Z", "relationship_type": "related-to", "source_ref": "incident--c869f62c-9995-5dd5-a470-cf8eed935deb", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:40:20.335Z", "name": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog", "description": "Detected automatically from 6 articles in 2 outlets (Korea Times, Yonhap), Oct 6 to Oct 9, 2026. Type: intrusion; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-20261006/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005000320", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261006005051320", "description": "(LEAD) 28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Korea Times", "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/28-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss", "description": "28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003600315", "description": "Police expand team investigating recent hacking of financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261009003651315", "description": "(LEAD) Police expand team investigating recent hacking of financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-06", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Government", "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--342e01dd-fd32-5929-98e6-d047144faa8f", "created": "2026-11-10T16:32:07.919Z", "modified": "2026-11-10T16:32:07.919Z", "relationship_type": "related-to", "source_ref": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--3e175698-9ffd-56e1-baba-dca2aa571bd5", "created": "2026-11-10T16:32:07.897Z", "modified": "2026-11-10T16:40:20.315Z", "name": "Loạt ngân hàng Hàn Quốc liên tiếp bị tấn công mạng", "description": "Detected automatically from 1 article in 1 outlet (VN Express), Oct 5, 2026. Type: intrusion. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "intrusion", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/loat-ngan-hang-han-quoc-lien-tiep-bi-tan-cong-mang-20261005/" }, { "source_name": "VN Express", "url": "https://vnexpress.net/loat-ngan-hang-han-quoc-lien-tiep-bi-tan-cong-mang-5128451.html", "description": "Loạt ngân hàng Hàn Quốc liên tiếp bị tấn công mạng" } ], "x_securitystudies_occurred_on": "2026-10-05", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--abaa3db1-ca6b-5924-bb3a-bfcdfa15f988", "created": "2026-11-10T16:32:07.897Z", "modified": "2026-11-10T16:32:07.897Z", "relationship_type": "related-to", "source_ref": "incident--3e175698-9ffd-56e1-baba-dca2aa571bd5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:40:20.291Z", "name": "Lee calls for thorough probe into personal data leaks at financial institutions", "description": "Detected automatically from 3 articles in 2 outlets (The Korea Herald, Yonhap), Oct 4, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lee-calls-for-thorough-probe-into-personal-data-leaks-at-financial-ins-20261004/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002100315", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892927", "description": "Lee calls for thorough probe into personal data leaks at financial institutions" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261004002151315", "description": "(LEAD) Lee calls for thorough probe into personal data leaks at financial institutions" } ], "x_securitystudies_occurred_on": "2026-10-04", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--16d855d5-8dd3-53b0-83bb-77524c4ee27f", "created": "2026-11-10T16:32:07.875Z", "modified": "2026-11-10T16:32:07.875Z", "relationship_type": "related-to", "source_ref": "incident--61ace89f-32c9-5427-9f54-e7a8c1c953fa", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:40:20.272Z", "name": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks", "description": "Detected automatically from 1 article in 1 outlet (Yonhap), Oct 2, 2026. Type: other; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "other", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/2nd-ld-regulator-instructs-financial-firms-to-check-security-systems-o-20261002/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009152320", "description": "(2nd LD) Regulator instructs financial firms to check security systems over series of cyberattacks on banks" } ], "x_securitystudies_occurred_on": "2026-10-02", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--215fec95-ed3f-5c28-8fae-6a186de0e378", "created": "2026-11-10T16:32:07.859Z", "modified": "2026-11-10T16:32:07.859Z", "relationship_type": "related-to", "source_ref": "incident--f3551d60-9f23-534d-8f93-bea2091114c5", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:40:20.246Z", "name": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking", "description": "Detected automatically from 7 articles in 2 outlets (The Korea Herald, Yonhap), Oct 1 to Oct 2, 2026. Type: data breach; sectors: financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/lead-some-25000-customers-info-leaked-from-shinhan-bank-in-apparent-ai-20261001/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261001006351320", "description": "(LEAD) Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10891104", "description": "Some 25,000 customers' info leaked from Shinhan Bank in apparent AI agent-assisted hacking" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004900320", "description": "KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002004951320", "description": "(LEAD) KB Kookmin Bank suffers info leak raising concerns over data breach at other lenders" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009100320", "description": "89 customers' personal information leaked from Hana Bank" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10892290", "description": "Hana, BNK report data breaches as hacking hits Korean banks" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20261002009151320", "description": "(LEAD) 89 customers' personal information leaked from Hana Bank" } ], "x_securitystudies_occurred_on": "2026-10-01", "x_securitystudies_severity": 3, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Financial Services" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--66702bc7-25a3-54c6-9570-7554fdb4d672", "created": "2026-11-10T16:32:07.837Z", "modified": "2026-11-10T16:32:07.837Z", "relationship_type": "related-to", "source_ref": "incident--55a6564d-68e7-5cef-b137-2793678a5244", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:40:20.204Z", "name": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data", "description": "Detected automatically from 2 articles in 2 outlets (The Korea Herald, Yonhap), Sep 27, 2026. Type: data breach; sectors: manufacturing. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/nearly-4-in-10-s-korean-industrial-technology-leaks-involve-semiconduc-20260927/" }, { "source_name": "Yonhap", "url": "https://en.yna.co.kr/view/AEN20260927000800320", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10885167", "description": "Nearly 4 in 10 S. Korean industrial technology leaks involve semiconductors: data" } ], "x_securitystudies_occurred_on": "2026-09-27", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [ "Manufacturing" ], "x_securitystudies_eu_relevance": "medium" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f68948f2-b13a-5880-92b1-b86e7dff596a", "created": "2026-11-10T16:32:07.776Z", "modified": "2026-11-10T16:32:07.776Z", "relationship_type": "related-to", "source_ref": "incident--e1a61d0d-4fce-5343-acc6-e7b20391bcc3", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "incident", "id": "incident--b214b011-e352-5ad1-8fdb-06ed77f71141", "created": "2026-11-10T16:32:07.673Z", "modified": "2026-11-10T16:40:20.131Z", "name": "Coupang forms security panel after massive data breach", "description": "Detected automatically from 2 articles in 1 outlet (The Korea Herald), Sep 15 to Sep 16, 2026. Type: data breach. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.", "confidence": 15, "labels": [ "data_breach", "detected-unreviewed" ], "external_references": [ { "source_name": "securitystudies.info", "url": "https://securitystudies.info/cyber/incidents/coupang-forms-security-panel-after-massive-data-breach-20260915/" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10874209", "description": "Coupang forms security panel after massive data breach" }, { "source_name": "The Korea Herald", "url": "https://www.koreaherald.com/article/10876064", "description": "Coupang rejects 100,000 won compensation plan for users affected by data breach" } ], "x_securitystudies_occurred_on": "2026-09-15", "x_securitystudies_severity": 2, "x_securitystudies_status": "detected-unreviewed", "x_securitystudies_sectors": [], "x_securitystudies_eu_relevance": "low" }, { "spec_version": "2.1", "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa", "object_marking_refs": [ "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9" ], "type": "relationship", "id": "relationship--f5d5862b-148a-5851-8514-e0c3bfb9e9fd", "created": "2026-11-10T16:32:07.673Z", "modified": "2026-11-10T16:32:07.673Z", "relationship_type": "related-to", "source_ref": "incident--b214b011-e352-5ad1-8fdb-06ed77f71141", "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4", "description": "affected country" } ] }