ENKR

LG Uplus customer-authentication-system breach

Add to my breach check

Made public · 297,117 records

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data
  • Username

Permanent

  • Date of birth
  • Full name
  • Other profile dataUSIM serial number and the remaining fields of 26

To-dos4 · about 45 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  3. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next27 events

  1. Undetected 3 eventsabout 4 yr 7 mo · show events
  2. Response 13 eventsNotice in 8 days · Back to latest
  3. Remedy 3 eventsEnded · show events
  4. Penalty 8 eventsFine ₩6.8B · show events
  5. DisputesNone on record

Response: 13 events

Back to latest
  1. Said KRW 64 billion of the KRW 105 billion annual security budget was committed by June
  2. Second apology after the government results
  3. Free USIM replacement in stores for notified customers · MVNO included; others from March 1, 2023 via website
  4. Damage-support centre opened for small businesses and PC cafés hit by the DDoS outages
  5. Cyber safety plan: CISO/CPO under the CEO, annual security investment to be raised about threefold to KRW 100 billion
8 more
  1. The CEO apologised at a press conference for the leak and the outages
  2. Notice of about 110,000 more people, found in separately kept data of former customers; total about 290,000
  3. Apology in the website notice
  4. Individual notices by email and text message
  5. Website notice of a leak affecting about 180,000 customers
  6. Reported the incident to KISA and other agencies
  7. Asked the police cyber unit to investigate
  8. Website lookup to check whether one's data leaked
Company
LG Uplus
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
297,117 records · deduplicated; PIPC

How the facts developed

  1. PIPC decision: 297,117 records, 26 fields, leak around June 2018; 과징금 68억원, 과태료 2,700만원
  2. Notice of about 180,000 customers; raised to about 290,000 people in February 2023 (press)

Sources