Nearly 27 million mobile fingerprints leaked in SK Telecom data breach: ministry
A joint team of public and private investigators found that nearly 27 million units of international mobile subscriber identity, or IMSI, have been leaked from SK Telecom's data breach, the Ministry of Science and ICT said Monday.
'The investigators confirmed that the amount of leaked (universal subscriber identity module, or USIM) information was 9.82 (gigabytes), which equals to about 26.69 million units of the IMSI,' said Choi Woo-hyuk, director general of the Cyber Security & Network Policy Bureau at the Science Ministry, in a press briefing to announce the interim findings of the probe at the Government Complex Seoul.
IMSI, which can be regarded as a mobile fingerprint, is a 15-digit or shorter number used to identify and authenticate each mobile subscriber on a cellular network.
As for SK Telecom's 25 million subscribers being smaller than the number of leaked IMSIs, the officials explained that the number of IMSIs combines all universal subscriber identity modules, or USIMs, loaded onto not only smartphones but also smart watches and other connected devices using the Internet.
The authorities announced that they found 25 types of malware and 23 hacked servers so far, up 21 and 18, respectively, from the previous discoveries released by the joint investigation on April 29. Having completed the investigation of 15 servers through detailed assessments, such as forensic and log analysis, the authorities plan to finish the investigation of the remaining eight servers by the end of May.
According to the investigators, the first malware was found to have been installed on June 15, 2022. They added that no data was leaked between Dec. 2, 2024, and April 24, 2025. However, they could not confirm whether any data was leaked between June 15, 2022, and Dec. 2, 2024, a period without firewall log history.
Regarding the concerns over possible damages from copy phones, whether the information of international mobile equipment identity, or IMEI, a 15-digit serial number assigned to every mobile phone, was leaked or not drew serious worries among the public. Unlike the government's previous announcement in April, the authorities confirmed during Monday's briefing that they found a hacked server containing 291,831 units of IMEI.
According to investigators, there were no damage reports regarding the data breach at the country's biggest telecom carrier yet. They added that phone makers say making copy phones just using the IMEI information is technically impossible.
'Given the types of malware and the methods used in this attack, it is clear that a far more sophisticated level of analysis and efforts are needed compared to what we've seen before,' said Ryu Je-myung, deputy minister of the Office of Network Policy. "That is why we are conducting this investigation with the utmost intensity, based on the judgment that unless we uncover every potential risk thoroughly, there could be even greater threats in the future."
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Korea Herald
2 days ago
- Korea Herald
Korea ends phone subsidy law: Are cheaper smartphones coming?
Samsung's new foldables, Apple's upcoming iPhone 17 to test new free-market phone pricing South Korea is to officially repeal its decade-old handset subsidy law on Tuesday, opening the door to bigger discounts and potentially cheaper smartphones — just in time for the launch of Samsung Electronics' new Galaxy Z Flip7 and Fold7 later this month and Apple's iPhone 17 in the fall. Industry insiders say a 'subsidy war' is likely to break out, as mobile carriers rush to regain market share with aggressive pricing and subsidies. SK Telecom, in particular, is expected to take bold action after losing over 800,000 subscribers in a major April data breach. The repeal marks a major shift in the mobile phone market. Carriers and retailers will no longer be restricted by government-set subsidy limits, allowing for more flexible and competitive pricing. Phones could even be sold at 'zero-cost,' depending on the plan and promotions. To help consumers understand what the repeal means and how to make smart choices in the new free-market landscape, The Korea Herald answers key questions below. Q: What is the subsidy law and why is it repealed? The Mobile Device Distribution Improvement Act was passed in 2014 to make phone pricing more transparent and fair. It capped store discounts at 15 percent on top of official carrier subsidies and required carriers to publish fixed subsidy amounts. But over time, critics said it had the opposite effect — inflating smartphone prices, limiting consumer benefits and making the market harder to navigate. After years of complaints from consumers and industry players alike, the government decided to repeal the law to encourage more competition, bigger discounts and greater pricing flexibility. Q: What's changing now that the law is gone? Carriers no longer need to publicly post fixed subsidy amounts and retailers are no longer restricted to 15 percent discounts. That means devices could be sold with much higher discounts — even for free, depending on the plan. However, retailers must now clearly explain all subsidy conditions in their contracts. Q: Can I still see how much of a subsidy I'm getting? Yes, but only voluntarily. The major carriers — SK Telecom, KT and LG Uplus — have agreed with regulators to continue posting subsidy information online by rate plan, although it is no longer legally mandated. Q: Where do I find extra discounts from stores? Discounts will vary by store. Authorized dealers and independent shops may offer different incentives, so it pays to compare offers before signing a contract. Q: Can I combine the 25% discount with store deals? Yes. You can still choose the 25 percent discount for going contract-free and also get additional discounts from retailers, thanks to looser rules. Q: Do discounts depend on how I sign up? Yes. Retailers can now offer different discounts depending on whether you are switching carriers, starting a new plan or upgrading. That kind of 'discriminatory pricing' was previously restricted, but is now allowed. Q: Is there a limit on how much discount I can get? No. There's no longer a cap on discounts. The carrier, phone-maker and store can set subsidy amounts freely. In theory, this means that even the latest phones could be priced at zero, but only under specific plans or conditions. Q: What counts as unfair pricing now? While pricing can vary by plan and contract type, stores must offer equal subsidies to everyone under the same conditions — the same phone, plan and type of contract. The telecom regulator will monitor for violations. Q: Will phone-makers reveal more about incentives? Yes. Companies like Samsung and Apple must now report monthly data on incentives they give to carriers and retailers. This info will be submitted to the Ministry of Science and ICT and the Korea Communications Commission. Q: What should I check before signing a contract? Always review: Who is providing the subsidy (carrier or retailer) How it's being applied Any extra fees or plan requirements Retailers must disclose everything clearly and if they don't, they could face penalties. Q: Are my consumer rights still protected? Yes. Protections remain in place, including bans on: Discrimination based on age, region or disability Being pushed into expensive plans Misleading or false advertising Q: What about vulnerable groups like the elderly? The government says it will pay special attention to 'information-vulnerable' groups like seniors and teenagers, ensuring they are not excluded or misled in the new competitive environment. Q: How is the government keeping watch? A joint task force of regulators and telecom firms will meet at least twice a week to monitor the market and respond quickly to any signs of chaos or abuse. Q: Can I buy new phones cheaper now? Possibly soon. Industry insiders say a 'subsidy war' is inevitable, at least in the short term, as mobile carriers ramp up aggressive marketing and offer larger discounts to win over customers. SK Telecom, which lost over 800,000 subscribers after a major hacking incident in April and dropped below 40 percent market share, is widely expected to launch a bold pricing strategy to regain ground. The timing also adds fuel to the fire: Samsung's latest foldables, the Galaxy Z Flip7 and Fold7, hit the market on July 25, while Apple's iPhone 17 is expected later in the third quarter. These high-profile launches are seen as key moments that could set the tone for how the postsubsidy market unfolds — and whether Korean consumers will finally get their hands on premium smartphones at lower prices.
Korea Herald
5 days ago
- Korea Herald
BTS producer becomes first tycoon referred to prosecution under new president's toughened financial oversight
Hybe says it will actively clarify Bang Si-hyuk's suspicions to regain trust South Korea's financial regulators have referred Hybe Chairman Bang Si-hyuk to the prosecution on charges of fraudulent trading, accusing him of misleading shareholders during the company's initial public offering and profiting nearly 400 billion won ($287.6 million) in the process. This marks the first time under the Lee Jae Myung administration that authorities have taken such strong disciplinary action against the head of a major conglomerate. Regulators reportedly gave Bang an unusual opportunity to appear in person and explain himself, but he declined to attend. The Financial Services Commission's Securities and Futures Commission held a regular meeting Wedneday and announced that it had referred Bang and former Hybe executives to prosecutors on suspicion of violating the Capital Markets Act, particularly its ban on unfair trading practices. A referral to the prosecution is the most severe action financial regulators can take against an individual accused of violating the law, in addition to administrative penalties. Under the Capital Markets Act, a person who gains or avoids losses of over 5 billion won through unfair trading may face a prison term of five years to life. 'The suspects circumvented the lock-up period meant to prevent major shareholders from offloading shares immediately after listing, and dumped their shares on the market for profit. The nature of this violation is particularly serious,' a financial authority official said via local media outlet. 'The stock price plunged afterward, causing significant harm to ordinary retail investors.' Hybe said it would actively work to clarify the suspicions and restore market trust. 'It is unfortunate that the financial regulators did not accept the major shareholder's explanation during the Financial Supervisory Service's investigation, in which he made clear he did not pursue personal gains based on the company's IPO,' Hybe said in a statement sent to The Korea Herald on Thursday. 'Nevertheless, we respect the decision and will do our utmost in the upcoming investigation to actively address the allegations and recover the trust of the market and our stakeholders,' the company added. According to authorities, Bang allegedly deceived early investors into selling their shares by falsely claiming that Hybe's IPO prospects in 2019 were bleak. He is also believed to have signed a private agreement with a private equity fund that had acquired a large stake in the company, pledging to share 30 percent of any future gains from selling his shares — eventually profiting nearly 400 billion won. In response to this type of misconduct, the Korea Exchange revised its IPO due diligence checklist late last year, adding requirements for underwriters to inspect contracts between shareholders and assess risks to investor protection.
Korea Herald
5 days ago
- Korea Herald
BTS producer becomes first tycoon referred to prosecution under Lee's toughened financial oversight
Hybe says it will actively clarify suspicions to regain trust South Korea's financial regulators have referred Hybe Chairman Bang Si-hyuk to the prosecution on charges of fraudulent trading, accusing him of misleading shareholders during the company's initial public offering and profiting nearly 400 billion won ($287.6 million) in the process. This marks the first time under the Lee Jae Myung administration that authorities have taken such strong disciplinary action against the head of a major conglomerate. Regulators reportedly gave Bang an unusual opportunity to appear in person and explain himself, but he declined to attend. The Financial Services Commission's Securities and Futures Commission held a regular meeting Wedneday and announced that it had referred Bang and former Hybe executives to prosecutors on suspicion of violating the Capital Markets Act, particularly its ban on unfair trading practices. A referral to the prosecution is the most severe action financial regulators can take against an individual accused of violating the law, in addition to administrative penalties. Under the Capital Markets Act, a person who gains or avoids losses of over 5 billion won through unfair trading may face a prison term of five years to life. 'The suspects circumvented the lock-up period meant to prevent major shareholders from offloading shares immediately after listing, and dumped their shares on the market for profit. The nature of this violation is particularly serious,' a financial authority official said via local media outlet. 'The stock price plunged afterward, causing significant harm to ordinary retail investors.' Hybe said it would actively work to clarify the suspicions and restore market trust. 'It is unfortunate that the financial regulators did not accept the major shareholder's explanation during the Financial Supervisory Service's investigation, in which he made clear he did not pursue personal gains based on the company's IPO,' Hybe said in a statement sent to The Korea Herald on Thursday. 'Nevertheless, we respect the decision and will do our utmost in the upcoming investigation to actively address the allegations and recover the trust of the market and our stakeholders,' the company added. According to authorities, Bang allegedly deceived early investors into selling their shares by falsely claiming that Hybe's IPO prospects in 2019 were bleak. He is also believed to have signed a private agreement with a private equity fund that had acquired a large stake in the company, pledging to share 30 percent of any future gains from selling his shares — eventually profiting nearly 400 billion won. In response to this type of misconduct, the Korea Exchange revised its IPO due diligence checklist late last year, adding requirements for underwriters to inspect contracts between shareholders and assess risks to investor protection.
