South Korea's Lotte Card Breach Exposes 2.97 Million Customers' Personal Details

Strategic Insights -

Lotte Card, a leading credit card issuer in South Korea, has revealed a massive data breach that exposed the personal details of nearly 3 million customers. The breach, which was discovered during internal security checks, compromised sensitive information, including full card numbers and security codes for about 280,000 users. The South Korean government has swiftly responded to the incident, with President Lee Jae-myung ordering the government to devise fundamental measures to minimize damage from hacking incidents.

Key Takeaways:

  • The data breach exposed personal details of approximately 2.97 million Lotte Card customers, with about 280,000 customers having sensitive data leaked, including full card numbers, CVC codes, and resident registration numbers.
  • The leaked data volume is large, amounting to about 200 gigabytes, which is about 30% of Lotte Card's total customer base of 9.6 million cardholders.
  • Lotte Card has promised to re-issue credit cards for affected customers, offer full compensation, and provide interest-free installment options for up to 10 months.
  • The government has launched an investigation and is considering strict penalties, regulatory reforms, and punitive fines for large data breaches, which could reach up to 80 billion won.
  • The incident highlights the growing sophistication of cyber threats and the need for businesses to integrate cybersecurity with ESG and make it a core part of governance.
  • The breach underscores the importance of vigilance among customers, who should monitor statements, request card changes if notified, and consider credit freezing/alerts.

Statistics:

  • 2.97 million: The approximate number of Lotte Card customers whose personal details were exposed in the data breach.
  • 280,000: The number of customers who had sensitive data leaked, including full card numbers, CVC codes, and resident registration numbers.
  • 200 gigabytes: The volume of leaked data.
  • 30%: The percentage of Lotte Card's total customer base that was affected by the breach.
  • 9.6 million: The total number of Lotte Card cardholders.
  • 110 billion won: The budget Lotte Card has earmarked to strengthen data security over the next five years.
  • 80 billion won: The maximum punitive fine that Lotte Card might face for the data breach.

Sources:

  • Reuters news report.
  • The Korea Times.
  • Lotte Card's official statement.
  • South Korean President Lee Jae-myung's statement.
  • Financial regulators' investigation report.