SK Telecom, South Korea’s largest telecom operator, suffered a **massive data breach** leading to severe regulatory and financial repercussions. The **Personal Information Protection Commission (PIPC)** imposed a **record fine of 134.8 billion won (~$91.4 million)** for violations of data privacy laws. The breach exposed **sensitive customer data**, triggering a prolonged investigation and enforcement action. The company received the formal sanction in late October 2025, initiating a **90-day review period** with an appeal deadline in **late January 2026**. SK Telecom is reportedly **leaning toward appealing** the decision, but the incident has already inflicted **significant reputational damage**, operational disruptions, and potential long-term trust erosion among customers. The breach underscores systemic vulnerabilities in handling **personal and financial information**, with implications for compliance, governance, and cybersecurity resilience in the telecom sector.
SK Telecom cybersecurity rating report: https://www.rankiteo.com/company/sk-telecom
"id": "SK-0534105112425",
"linkid": "sk-telecom",
"type": "Breach",
"date": "10/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Telecom',
'location': 'South Korea',
'name': 'SK Telecom',
'type': 'Telecommunications'}],
'description': "Fallout from SK Telecom's massive data breach continues to "
'mount, with the company now reviewing a record 134.8 billion '
"won ($91.4 million) fine from South Korea's privacy watchdog "
'(Personal Information Protection Commission). The regulator '
'issued the sanction decision on Aug. 28, 2025, though SK '
'Telecom did not receive the formal written decision report '
'until late October, triggering a 90-day review period that '
'puts the appeal deadline in late January 2026. The company is '
"'leaning toward' appealing the decision.",
'impact': {'brand_reputation_impact': True,
'data_compromised': True,
'legal_liabilities': {'fine_amount': '134.8 billion won ($91.4 '
'million)',
'regulator': 'Personal Information '
'Protection Commission (South '
'Korea)'}},
'investigation_status': {'regulatory_review': 'ongoing (appeal period until '
'late January 2026)'},
'references': [{'date_accessed': 'November 24, 2025',
'source': 'MLex Insight'}],
'regulatory_compliance': {'fines_imposed': '134.8 billion won ($91.4 million)',
'legal_actions': {'appeal_intent': 'leaning toward '
'appealing',
'appeal_status': 'under review '
'(deadline: late '
'January 2026)'},
'regulations_violated': ["South Korea's Personal "
'Information Protection '
'Act (or equivalent)'],
'regulatory_notifications': {'decision_date': 'August '
'28, '
'2025',
'formal_notice_date': 'late '
'October '
'2025',
'regulator': 'Personal '
'Information '
'Protection '
'Commission '
'(PIPC)'}},
'response': {'communication_strategy': {'appeal_intent': 'leaning toward '
'appealing the '
"regulator's "
'decision'}},
'title': 'SK Telecom Massive Data Breach',
'type': 'Data Breach'}