Source: Yonhap News Agency

What happened

According to Yonhap, South Korea’s Personal Information Protection Commission said Thursday it fined wireless carrier KT Corp. 53.9 billion won (about US$37.4 million) over a major data breach that affected more than 16,000 users. The regulator also ordered corrective measures after hackers entered KT’s wireless network through unauthorized mobile base stations.

The breach, first reported by the company in September, hit phone numbers and mobile device identification numbers of 16,872 users. Malicious actors then ran unauthorized transactions that caused 240 million won in losses for 368 victims.

The breakdown

Yonhap says hackers went unnoticed on KT’s network from Oct. 8, 2024, to Sept. 5, 2025. KT only realized after a user complaint. Access came from illegal base stations built with authentication certificates taken from base stations KT had lost.

The commission ordered stronger security for wireless network equipment and personal-information protections. Separately, it decided to file a police complaint against KT for obstructing an investigation into a March 2024 hacking incident the company did not report. KT initially denied keeping records of malware-infected servers, then produced them after the regulator found signs of evidence tampering.

The watchdog also referred LG Uplus to police on suspicion of obstruction after finding the company had covered up or destroyed records of a data leak reported by an online cybersecurity publication in August — including destroying servers that made the leak harder to reconstruct.

Why it matters outside Korea

Expats and travelers on KT (and anyone comparing Korea carriers) should treat this as a network-identity and micropayment risk story, not only a headline fine. Phone numbers and device IDs were the exposed layer; unauthorized transactions followed for hundreds of victims.

If you use Korean mobile payments, eSIM/USIM-linked billing, or keep a long-lived KT line while overseas, the operational question is whether your SIM/account hygiene and carrier notices match a breach that ran nearly a year before detection.

What travelers and expats should watch

• Carrier notices and USIM options: check KT app/SMS history for breach or free USIM-replacement offers tied to related payment incidents; do not ignore “replace SIM” prompts.
• Micropayment and billing alerts: enable transaction alerts; dispute unrecognized charges quickly — Yonhap’s victim pool shows money moved after ID theft.
• Lost/retired femtocell gear is not your problem to fix — account hygiene is: assume illegal base-station attacks are a carrier-side failure, then still rotate passwords and review linked payment methods.
• LG Uplus customers: the parallel police referral is a separate probe signal — watch for your carrier’s formal notices rather than social rumors.

Context

Read this as a year-long radio-access breach with a nine-figure fine, not as proof every KT customer lost banking data. Yonhap’s hard stack is ₩53.9B / 16,872 users / ₩240M losses / 368 victims / Oct 2024–Sept 2025. Korelay’s frame: update mobile-payment vigilance and carrier follow-ups; keep obstruction allegations attributed to the regulator’s police complaints, not as finished court findings.

Korelay take

Read this as a year-long radio-access breach with a nine-figure fine, not as proof every KT customer lost banking data. Yonhap’s hard stack is ₩53.9B / 16,872 users / ₩240M losses / 368 victims / Oct 2024–Sept 2025. Korelay’s frame: update mobile-payment vigilance and carrier follow-ups; keep obstruction allegations attributed to the regulator’s police complaints, not as finished court findings.

Editor note: Desk reporting supplies the timeline; Korelay adds the overseas behavior layer (what to change, what not to assume, what to re-check). If you only need the wire facts, open the primary link in Source.

Source

Yonhap: KT fined 54 bln won over data leak via illegal base stations — paraphrased for briefing; read the original for full detail.