The mobile carrier reported that the breach occurred due to malicious code infiltrating its systems. While the exact scope and nature of the data leak are still under investigation, the company stated it took immediate steps to report the incident to the Korea Internet and Security Agency (KISA), aligning with regulatory requirements.
In a message to employees, CEO, Ryu Young-sang, conveyed his regret and accepted responsibility for the breach. He urged staff to take stronger measures to improve the company’s cybersecurity framework and enhance efforts to protect customer data.
SK Telecom confirmed it has notified the Personal Information Protection Commission of the incident and is working closely with investigators. The company added that it promptly deleted the malicious code and isolated the affected equipment upon detecting a possible breach. There have been no confirmed reports of the leaked data being misused.
The company said it will adopt stronger security measures, including comprehensive system inspections, upgraded detection and blocking systems for illegal SIM-related activities, and improved alert protocols in cases of potential threats. A free SIM protection service is also being offered through its website and T World platform.
In response to the incident, the Ministry of Science and ICT (MSIT) has set up an emergency task force in collaboration with the Cyber Security and Network Policy Bureau. The ministry requested that SK Telecom preserve and submit relevant data for analysis. Officials from KISA were dispatched to the telecom provider’s Seoul headquarters for an on-site investigation.
Depending on the outcome of the investigation, the government may form a joint task force encompassing both the public and private sectors to co