보안 뉴스 업데이트
Cyber Security News Update
Every day at 8:00 a.m. KST — selected hacking and cybersecurity news from Korea and around the world, summarized with links to the original articles.
2026-10-28 (Wed) Morning edition
Today's Top 10
-
Bithumb Internal System Hacked, Personal Data Leaked
Virtual asset exchange Bithumb discovered on October 27 that an outsider had abnormally accessed its internal mobile groupware system, leaking personal information. The leaked data includes employees' names, emails, and phone numbers, while the exact scope, including whether member data was affected, is still under investigation. Bithumb reported the breach to the Korea Internet & Security Agency and the Personal Information Protection Commission on the day it was discovered.
-
AI-Powered Hacking Group Stole 8.2 Million Records from 90 Institutions
The Seoul Metropolitan Police Agency announced on October 26 that it had arrested the ringleader of a group that used generative AI and automated penetration tools to hack about 90 institutions, including hospitals, academies, and universities, stealing over 8.2 million pieces of personal information and internal data. The group demanded money from 38 companies but actually received only 300,000 won. The ringleader, who had no formal IT training, reportedly used AI tools to rapidly expand the scope and number of targets.
ZDNet Korea · Read original (opens in new window) ↗
-
US University Hospital Disrupts Surgeries After Ransomware Attack
The University of New Mexico (UNM) Health Sciences Center suffered an attack by a newly emerged ransomware group called 'Byod' on October 26, disrupting patient care and surgery schedules. The group claimed to have taken control of about 36,000 devices across the main campus and hospital systems, the entire Entra tenant, and two Oracle databases. Following the attack, outpatient visits and appointments were cancelled and ambulances were diverted to nearby hospitals, disrupting medical services.
BleepingComputer · Read original (opens in new window) ↗
-
US Federal Election Commission System Down Amid Hacking Attempt
The US Federal Election Commission's (FEC) electronic filing system went offline on the night of October 27 due to a hacking attempt, disrupting campaign finance disclosures just a week before the midterm elections. FEC IT staff worked to restore service, and the agency stated that election operations themselves were not affected. The outage delayed political organizations' submission of 24-hour and 48-hour expenditure reports.
-
Dev Platform Railway Warns of Possible Customer Secret Exposure
Cloud development platform Railway detected suspicious activity on October 21 in the system storing customer environment variables, and said an attacker may have accessed encrypted environment variables and some decrypted content. Potentially exposed items include API keys, database credentials, and encryption keys, with an estimated 1.85% of all workspaces affected. Railway said the attack appears to be part of a broader campaign targeting platform companies to obtain AI inference providers' API keys.
The Hacker News · Read original (opens in new window) ↗
-
Fintech Firm Goweed Suffers Hack, Leaking Client Company Data
B2B fintech company Goweed announced on October 27 that an external breach in its billing and payment functions for its expense optimization service leaked personal and payment information of client company managers. The leaked data includes managers' names, emails, phone numbers, masked card numbers, and billing records, while the corporate card service remains unaffected and usable normally. Goweed fully cancelled the abnormal transactions and reported the breach to the Korea Internet & Security Agency the same day.
-
University of Copenhagen Hack Exposes 525,000 People's Data
The University of Copenhagen in Denmark confirmed that a hack of its exam environment system exposed the personal information of about 525,000 people. The leaked data includes names, Danish national ID numbers, phone numbers, and email addresses, and the ID passwords of about 20,000 staff and students were also exposed. The university blocked the attacker's access, but as of October 27 some systems were still being restored.
Help Net Security · Read original (opens in new window) ↗
-
KB Kookmin Bank Breach Scope Expands from 119 to 2,210 People
KB Kookmin Bank announced that a re-investigation of a prior breach identified an additional 2,091 affected customers and employees, bringing the total number of affected people to 2,210. The newly identified individuals include 1,631 customers and 460 employees, and the bank said this was not a new attack but rather previously missed victims uncovered while re-examining the earlier incident. The leaked information includes names, dates of birth, and contact details, as well as financial data such as account numbers, loan transaction history, and credit ratings.
-
French Energy Firm ENGIE Hit by Breach via Partner Platform
French energy company ENGIE confirmed on October 27 that a breach of a marketing platform used by a partner company leaked data belonging to its French customers. The exposed information includes customer contact details and contract and meter identification numbers, with no account or payment information involved. ENGIE blocked the attacker's access to the platform and reported the incident to authorities, but has not yet disclosed the number of affected customers.
BleepingComputer · Read original (opens in new window) ↗
-
Ticketbay Hack Leaks Personal Data of 16,000 Members
Ticket trading platform Ticketbay announced that an external attacker abnormally accessed some of its APIs on October 21, leaking personal information of about 16,000 members. The leaked data includes names, user IDs, registration dates, and transaction details such as event names and order history, raising concerns about misuse for targeted phishing. Ticketbay has blocked the abnormal access route and strengthened authentication and access control verification.
Korea — Hacking News
-
Bithumb Internal System Hacked, Personal Data Leaked
Virtual asset exchange Bithumb discovered on October 27 that an outsider had abnormally accessed its internal mobile groupware system, leaking personal information. The leaked data includes employees' names, emails, and phone numbers, while the exact scope, including whether member data was affected, is still under investigation. Bithumb reported the breach to the Korea Internet & Security Agency and the Personal Information Protection Commission on the day it was discovered.
-
AI-Powered Hacking Group Stole 8.2 Million Records from 90 Institutions
The Seoul Metropolitan Police Agency announced on October 26 that it had arrested the ringleader of a group that used generative AI and automated penetration tools to hack about 90 institutions, including hospitals, academies, and universities, stealing over 8.2 million pieces of personal information and internal data. The group demanded money from 38 companies but actually received only 300,000 won. The ringleader, who had no formal IT training, reportedly used AI tools to rapidly expand the scope and number of targets.
ZDNet Korea · Read original (opens in new window) ↗
-
Fintech Firm Goweed Suffers Hack, Leaking Client Company Data
B2B fintech company Goweed announced on October 27 that an external breach in its billing and payment functions for its expense optimization service leaked personal and payment information of client company managers. The leaked data includes managers' names, emails, phone numbers, masked card numbers, and billing records, while the corporate card service remains unaffected and usable normally. Goweed fully cancelled the abnormal transactions and reported the breach to the Korea Internet & Security Agency the same day.
-
KB Kookmin Bank Breach Scope Expands from 119 to 2,210 People
KB Kookmin Bank announced that a re-investigation of a prior breach identified an additional 2,091 affected customers and employees, bringing the total number of affected people to 2,210. The newly identified individuals include 1,631 customers and 460 employees, and the bank said this was not a new attack but rather previously missed victims uncovered while re-examining the earlier incident. The leaked information includes names, dates of birth, and contact details, as well as financial data such as account numbers, loan transaction history, and credit ratings.
-
Ticketbay Hack Leaks Personal Data of 16,000 Members
Ticket trading platform Ticketbay announced that an external attacker abnormally accessed some of its APIs on October 21, leaking personal information of about 16,000 members. The leaked data includes names, user IDs, registration dates, and transaction details such as event names and order history, raising concerns about misuse for targeted phishing. Ticketbay has blocked the abnormal access route and strengthened authentication and access control verification.
Global — Hacking News
-
US University Hospital Disrupts Surgeries After Ransomware Attack
The University of New Mexico (UNM) Health Sciences Center suffered an attack by a newly emerged ransomware group called 'Byod' on October 26, disrupting patient care and surgery schedules. The group claimed to have taken control of about 36,000 devices across the main campus and hospital systems, the entire Entra tenant, and two Oracle databases. Following the attack, outpatient visits and appointments were cancelled and ambulances were diverted to nearby hospitals, disrupting medical services.
BleepingComputer · Read original (opens in new window) ↗
-
US Federal Election Commission System Down Amid Hacking Attempt
The US Federal Election Commission's (FEC) electronic filing system went offline on the night of October 27 due to a hacking attempt, disrupting campaign finance disclosures just a week before the midterm elections. FEC IT staff worked to restore service, and the agency stated that election operations themselves were not affected. The outage delayed political organizations' submission of 24-hour and 48-hour expenditure reports.
-
Dev Platform Railway Warns of Possible Customer Secret Exposure
Cloud development platform Railway detected suspicious activity on October 21 in the system storing customer environment variables, and said an attacker may have accessed encrypted environment variables and some decrypted content. Potentially exposed items include API keys, database credentials, and encryption keys, with an estimated 1.85% of all workspaces affected. Railway said the attack appears to be part of a broader campaign targeting platform companies to obtain AI inference providers' API keys.
The Hacker News · Read original (opens in new window) ↗
-
University of Copenhagen Hack Exposes 525,000 People's Data
The University of Copenhagen in Denmark confirmed that a hack of its exam environment system exposed the personal information of about 525,000 people. The leaked data includes names, Danish national ID numbers, phone numbers, and email addresses, and the ID passwords of about 20,000 staff and students were also exposed. The university blocked the attacker's access, but as of October 27 some systems were still being restored.
Help Net Security · Read original (opens in new window) ↗
-
French Energy Firm ENGIE Hit by Breach via Partner Platform
French energy company ENGIE confirmed on October 27 that a breach of a marketing platform used by a partner company leaked data belonging to its French customers. The exposed information includes customer contact details and contract and meter identification numbers, with no account or payment information involved. ENGIE blocked the attacker's access to the platform and reported the incident to authorities, but has not yet disclosed the number of affected customers.
BleepingComputer · Read original (opens in new window) ↗
Updated every day at 8:00 a.m. KST with selected hacking and cybersecurity news from Korea and abroad. Summaries are AI-generated — please check the original articles. Copyright of each article belongs to its publisher.