Has the Probe into SK Telecom's Data Breach Expanded to KT and LG Uplus?
Click to start listening
Synopsis
The cyber landscape is changing rapidly, and a recent investigation reveals startling developments in the SK Telecom data breach case. As authorities explore potential vulnerabilities across other major mobile carriers, questions loom large. What does this mean for consumer data safety in South Korea? Stay informed as we unravel the complexities of this significant incident.
Key Takeaways
- Investigation expands to KT and LG Uplus, revealing no compromises.
- 25 malware variants detected on SK Telecom servers.
- Concerns raised over USIM data security.
- Estimated 9.32 GB of data potentially leaked.
- Proactive cybersecurity measures are essential.
Seoul, May 26 (NationPress) A collaborative investigation team comprising both government and private sector experts is delving into the recent extensive data breach at SK Telecom Co. This inquiry has now broadened to include the servers of two other prominent mobile operators, KT Corp and LG Uplus. Fortunately, initial findings indicate that these carriers have not been compromised, as per industry sources.
The investigation team initially instructed local telecom and platform companies to perform their own cybersecurity evaluations. However, due to rising concerns that hackers employing BPFDoor malware variants may have also targeted additional South Korean mobile operators, the strategy was adjusted last week, according to these sources.
As the investigation progressed, it was confirmed that no signs of hacking activities have been detected on the servers of either KT or LG Uplus, as reported by Yonhap news agency.
During a media briefing last week, the investigation team disclosed provisional findings that revealed the presence of 25 malware variants across 23 servers belonging to SK Telecom. This included 24 variants of BPFDoor and a single variant of WebCell.
Among the compromised servers, two had served as temporary repositories for personal data such as names, birthdates, phone numbers, and email addresses, in addition to international mobile equipment identity (IMEI) data.
The IMEI serves as a unique identifier for each device on a network and could potentially be misused in financial transactions.
Servers at SK Telecom Co. containing personal information and universal subscriber identity module (USIM) data of all users have been breached in a cyberattack, sparking worries that crucial USIM data used in financial activities may have been exposed, according to a joint government-private investigation team.
The investigation team's interim findings suggest that the breach dates back to June 15, 2022, when unidentified assailants are believed to have infiltrated the company's servers. SK Telecom only became aware of the breach a month ago, on April 18.
Investigators estimate that approximately 9.32 gigabytes of USIM data, which translates to around 26.9 million international mobile subscriber identity (IMSI) numbers, may have been leaked. Currently, SK Telecom boasts 25 million subscribers, including about 2 million budget phone users.
Point of View
It is crucial to approach the situation with a balanced perspective. As a national editor, I emphasize the importance of transparency from telecom companies and the government in addressing these vulnerabilities. Consumer trust relies on proactive measures and stringent security protocols to safeguard personal information.
NationPress
26/07/2025
Frequently Asked Questions
What triggered the investigation into SK Telecom?
The investigation was initiated following a large-scale data breach at SK Telecom, prompting concerns about potential vulnerabilities in other mobile carriers.
Have KT Corp and LG Uplus been affected by the breach?
Preliminary findings indicate that KT Corp and LG Uplus have not been compromised in the investigation.
What types of data were compromised in the SK Telecom breach?
The breach involved personal data such as names, birthdates, phone numbers, and IMEI data, which could be exploited.
When was the breach first detected?
The breach is believed to have occurred on June 15, 2022, but was only discovered by SK Telecom on April 18, 2023.
How many subscribers could be affected?
Approximately 26.9 million IMSI numbers may have been leaked, involving SK Telecom's 25 million subscribers.
