South Korea fines SK Telecom $97 million for massive data breach

South Korea’s Personal Information Protection Commission (PIPC) fined SK Telecom ₩980 billion (around $97 million) following a large-scale data breach, which compromised the personal data of around 23 million customers. 

‍

The regulator’s investigation revealed that the company failed to encrypt key user information and neglected to implement timely security updates, leaving its servers vulnerable to cyberattacks. 

‍

In addition to the fine, the PIPC ordered SK Telecom to enhance its cybersecurity infrastructure and provide evidence of compliance improvements within a fixed timeframe. The case demonstrates South Korea’s increasingly strict approach to data protection enforcement.

‍