Industry - Enforcement
Executive Summary
Lotte Card was fined 5 billion won ($3.38 million) and banned from issuing new cards for 1.5 months after a 2023 hack of its online payment system exposed personal information of approximately 2.97 million customers. The Financial Services Commission imposed the penalties, with the new customer suspension running from August 1 to September 15. The enforcement action represents one of South Korea's significant regulatory responses to a major payment card data breach.
What Happened
South Korea's Financial Services Commission fined Lotte Card Co. 5 billion won ($3.38 million) and banned the company from issuing new cards for 1.5 months following a 2023 hack of its online payment system. The breach exposed personal information of approximately 2.97 million customers. The business suspension runs from August 1 to September 15, 2026, preventing Lotte Card from acquiring new customers during that period.
Who Is Affected
Approximately 2.97 million Lotte Card customers in South Korea had their personal information exposed in the breach. During the 1.5-month suspension period, potential new customers cannot obtain Lotte Card products, though existing cardholders can continue using their cards.
Why It Matters
This enforcement action represents one of South Korea's most significant regulatory responses to a payment card data breach, demonstrating that financial regulators will impose substantial fines and operational restrictions on companies that fail to protect customer data. The combined financial penalty and business suspension sets a precedent for holding payment processors accountable for cybersecurity failures affecting millions of users.
What You Should Do
If you are among the 2.97 million affected Lotte Card customers, monitor your financial accounts and credit reports closely for signs of identity theft or fraudulent activity. Contact Lotte Card directly to confirm what specific personal information was compromised in your case and what protections or monitoring services the company is offering to breach victims. Consider placing fraud alerts or credit freezes with South Korean credit bureaus to prevent unauthorized account openings.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources