Seoul: Data of nearly 3 million Lotte Card customers has been compromised following a hacking incident last month, the company announced. Lotte Card Co., recognized as the country’s fifth-largest card issuer, revealed that while personal data was leaked, there have been no reports of improper use so far.
According to Yonhap News Agency, the breach involved approximately 200 gigabytes of data, comprising identification numbers, internal identification numbers, and connecting information. Critical information such as card verification codes, card numbers, and card validity period for around 280,000 customers was also included, raising concerns of potential credit card fraud.
In response to the incident, Lotte Card CEO Cho Jwa-jin issued a public apology and promised full compensation for any reported damages resulting from the misuse of the stolen data. Cho explained that the leaked data emerged from the online settlement process conducted via online servers between July 22 and August 27.
Cho reassured customers by stating that the leaked data cannot be used for offline settlements, as additional identification processes are required for online transactions, making it difficult for the breached data to be used improperly. Earlier this month, Lotte Card, which boasts about 9.6 million members, reported the cyber breach and has since been collaborating with the financial watchdog to assess the extent of the damage.
This incident is the latest in a string of significant cyber breaches affecting the financial sector. Previously, Seoul Guarantee Insurance experienced a similar hacking event. The breach at Lotte Card occurs amid calls from Financial Supervisory Service Governor Lee Chan-jin urging financial institutions to enhance their cybersecurity measures and better protect customer information.