What Caused the Data Leak Affecting Nearly 3 Million Lotte Card Customers?
Click to start listening
Synopsis
A significant data breach involving Lotte Card Co. has compromised the personal information of nearly 3 million customers. As investigations unfold, the company's efforts to address the fallout are underway. Explore the implications of this incident and the broader concerns surrounding cybersecurity in the financial sector.
Key Takeaways
- 3 million customers affected by the data breach.
- Data leak includes sensitive identification details.
- No reports of misuse of the leaked data yet.
- Lotte Card plans full compensation for affected customers.
- Urgent call for improved cybersecurity in the financial sector.
Seoul, Sep 18 (NationPress) Lotte Card Co., the nation's fifth-largest card issuer, announced on Thursday that a hacking incident last month resulted in the exposure of personal data belonging to approximately 3 million customers. Fortunately, there have been no reports yet of improper use of this information.
According to Lotte Card, the compromised data, estimated to be around 200 gigabytes, contained sensitive details such as identification numbers, internal identification numbers, and connection information.
Additionally, the data breach involved card verification codes, card numbers, and the validity period for roughly 280,000 customers, critical information that could potentially expose them to credit card fraud, as reported by the Yonhap news agency.
Lotte Card's CEO, Cho Jwa-jin, publicly apologized and outlined response measures, which include full compensation for any damages reported due to the misuse of the stolen data.
"The leaked data was generated during the online settlement process via online servers between July 22 and August 27," Cho stated.
The CEO emphasized that the compromised information cannot be misused for offline transactions, as additional identification processes are required for online settlements, making it challenging to misuse the cards with just the breached data.
Earlier this month, Lotte Card, which boasts around 9.6 million members, admitted to a cyber breach. Since then, both the financial watchdog and the card company have been working to assess the repercussions of the hacking incident.
This data breach at Lotte Card marks the latest in a series of significant cybersecurity failures within the financial sector. Previously, Seoul Guarantee Insurance experienced a similar hacking episode.
Furthermore, Lotte Card's security breach comes at a time when Financial Supervisory Service Governor Lee Chan-jin has been urging financial institutions to enhance their cybersecurity measures and to better protect their customers.
In related news, the science ministry has launched an official investigation into an alleged attempt to sell personal data thought to have been leaked from South Korea's leading mobile provider, SK Telecom Co.
This development followed a global hacking group known as Scattered Lapsus$ announcing on its Telegram channel its desire to sell SK Telecom's client data for US$10,000, with reports indicating that 42 South Koreans had already made inquiries.
The government has also initiated a probe into KT Corp, the second-largest mobile carrier, which reported 278 cases of unauthorized mobile payments totaling 170 million won (approximately $122,000), heightening concerns regarding a potential leak of customer information.
Point of View
The recent data breach at Lotte Card highlights the urgent need for enhanced cybersecurity measures across the financial sector. As incidents continue to rise, consumers must remain vigilant while companies must prioritize safeguarding sensitive information to maintain public trust.
NationPress
20/09/2025
Frequently Asked Questions
What type of data was leaked in the Lotte Card breach?
The leaked data included identification numbers, internal identification numbers, card numbers, card verification codes, and card validity periods for approximately 280,000 customers.
Has there been any report of misuse of the leaked data?
As of now, there have been no reports of improper use of the leaked data.
What measures is Lotte Card taking in response to the breach?
Lotte Card's CEO issued a public apology and announced that they would fully compensate any damages reported due to the misuse of the stolen data.
How can customers protect themselves after the data leak?
Customers are advised to monitor their bank statements, report any unauthorized transactions, and consider changing their account details to enhance security.
What is the government's role in this incident?
The government, including the Financial Supervisory Service, is investigating the breach and urging financial institutions to strengthen their cybersecurity measures.
