Loading story…
South Korea's Lotte Card suffered a major data breach affecting 3 million customers, with attackers exploiting an unpatched server vulnerability. Exposed data includes identification numbers, contact details, and sensitive card information. The breach has triggered regulatory investigations and scrutiny over the company's cybersecurity investment.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
The Record reported that South Korean authorities were investigating a data breach at a credit card company affecting about 3 million customers. Because no more specific date was available in the reference, the event is dated to the article's publication date.
SC Media reported claims of a major breach involving Brazilian police medical records. The reference did not specify when the breach occurred, so the event date is inferred from the publication date.
SC Media reported an alleged hack affecting American Life Income, with the incident said to impact almost 150,000 individuals. No earlier incident date was provided in the reference, so the event is dated from the publication date.
3 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcescworld.com
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Lotte Card suffered a major data breach affecting 2.97 million users, with over 200GB of data compromised. The breach occurred on the company's online payments server between July 22 and August 27, 2025. Exposed data includes connection information, virtual payment codes, internal IDs, and payment service types.
Jun 29, 2026
South Korean regulators have notified **Lotte Card** that it faces about **5 billion won** in financial penalties and a **business suspension of more than four months** after hackers breached the company’s online payment system and exposed personal information belonging to about **2.97 million customers**. The notice was issued by the **Financial Supervisory Service**, with the **Financial Services Commission** expected to finalize the sanctions. Investigators found that Lotte Card had also failed to apply sufficient encryption to log files, adding to the severity of the case. The action represents a second major penalty tied to the same incident after the country’s data protection watchdog previously imposed an additional **9.62 billion won** fine, underscoring South Korea’s tougher enforcement posture, which can include suspending new customer sign-ups and penalizing executives after major breaches.
Jun 29, 2026
Coupang, South Korea's largest e-commerce platform, confirmed a major data breach that exposed the personal information of approximately 33.7 million customers, representing a significant portion of the country's population. The breach, which was initially detected on November 18 with only 4,500 accounts affected, was later found to be far more extensive, involving names, email addresses, phone numbers, shipping addresses, and partial order histories. Coupang stated that payment card details and login credentials were not compromised. The unauthorized access reportedly began on June 24, originating from overseas servers, and was facilitated by weaknesses in Coupang's authentication key management, including the failure to rotate or revoke signing keys after responsible employees left the company. South Korean authorities, including the National Police Agency, Korea Internet & Security Agency, and the Personal Information Protection Commission, have launched investigations into the incident, focusing on Coupang's compliance with data protection obligations. The government convened an emergency meeting and announced plans for stricter oversight and potential sanctions if safety measure violations are confirmed. Coupang has since blocked the unauthorized access route, enhanced internal monitoring, and engaged external security experts. The company issued public apologies and is cooperating with authorities to prevent further harm, while also notifying affected customers and providing support channels for inquiries.
Jun 29, 2026