SK Telecom Data Breach

In late April 2025, SK Telecom discovered unauthorized access to internal systems containing customer data. The breach exposed names, dates of birth, phone numbers, addresses, and partial resident registration numbers for roughly 27 million customers (nearly half of South Korea's population). The company confirmed the data was exfiltrated and later appeared on underground forums.

SK Telecom is South Korea's largest mobile network operator. Telecom companies hold highly detailed and long-lasting personal data, making them prime targets for identity theft and fraud.

The attackers exploited a vulnerability in an internal system or used compromised credentials. Exact method was not fully disclosed due to ongoing investigation, but reports suggest a supply-chain or contractor-related vector.

Unknown threat actor(s) targeting high-value national telecom datasets.

Attribution sources

• SK Telecom statements
• Korean authorities
• BleepingComputer

Countries affected

• South Korea

Data types

• PII
• Names
• Dates of Birth
• Phone Numbers
• Addresses
• Partial Resident Registration Numbers

Massive risk of identity theft and phishing across South Korea; regulatory fines expected.

Public reaction

Nationwide outrage and increased fear of identity theft and scams.

Political impact

Triggered emergency parliamentary hearings and stronger data protection demands in South Korea.

Ongoing regulatory investigation by Korea Communications Commission and Personal Information Protection Commission.

Civil lawsuits

• Multiple class-action style complaints expected

Policy changes

• Stronger requirements for telecom data security and breach notification.

Security improvements

• Accelerated internal system hardening and access control reviews.

Significance

One of the largest single-company customer data breaches in South Korea's history.

Legacy

Pushed South Korea toward stricter telecom cybersecurity regulations.

Publishing organisations

• BleepingComputer
• Yonhap News
• Korea Herald

Data already widely circulated; SK Telecom offering credit monitoring and identity protection services to affected customers.

Official documents

• SK Telecom Official Notice

References

1. [1]SK Telecom statements
2. [2]BleepingComputer reports
3. [3]Korean government announcements