Lotte Card hack exposes data of 3 million users

In Data Breach News
September 18, 2025

The Korea Herald reports that 2.97 million users, almost one third of the payment card’s 9.6 million customers, had their payment card data breached in an attack on Lotte Card’s online payments server:

The stolen information comprises that which was generated and collected during online transactions processed through the compromised server between July 22 and Aug. 27. It includes connection information, virtual payment codes, internal identification numbers and the type of easy payment service used.

Of those affected, about 280,000 customers face direct risks of unauthorized use because their card numbers, expiration dates and security codes were exposed while registering payment information online or via e-commerce platforms, Cho said.

About one-third of its users were affected, with over 200 gigabytes of data stolen — more than 100 times the 1.7 gigabytes initially reported and over 20 times the amount taken in the recent SK Telecom USIM server hack.

Read more at The Korea Herald.