KR: Lotte Card hack exposes data of 3 million users

Lotte Card has confirmed that a hacking attack compromised the personal data of 2.97 million users, marking the biggest data breach this year. According to the Financial Supervisory Service and Financial Security Institute, more than 200 gigabytes of data were breached, with the breach occurring on the company’s online payments server. Regulators began investigating on 2 September 2025.

The stolen information includes data generated and collected during online transactions processed through the compromised server between July 22 and August 27, such as connection information, virtual payment codes, internal identification numbers and the type of easy payment service used. The disclosure was made by Lotte Card’s CEO Cho Jwa-jin in the first public announcement since the probe began.