S. Korean credit card firms punished for data leak

Feb 16, 2014
South Korean customers wait to reissue their credit cards at a branch of Lotte Card in Seoul on January 21, 2014

South Korean regulators Sunday suspended some operations of three credit card firms as punishment for the unprecedented theft of financial data on more than 20 million people.

The country's largest-ever theft of personal financial data from KB Kookmin Bank, Lotte Card and NH Nonghyup Card involved more than 40 percent of the country's 50 million population.

The case provoked fury when revealed by prosecutors last month, with thousands flooding the firms' branches for days to cancel or get new ones.

The three credit card companies will be banned from issuing new credit cards for three months until May 16, the Financial Supervisory Commission (FSC) said Sunday.

"These firms neglected their duties...to prevent the leak of customers' information and (to comply with) internal controls," it said in a statement.

Operations involving existing cardholders will be unaffected, the FSC said, adding each of the three firms will also be fined six million won ($5,640).

The data was stolen by an employee from personal credit ratings firm Korea Credit Bureau who once worked as a temporary consultant at the three firms. He was arrested last month.

The stolen data included names, social security numbers, phone numbers, e-mail addresses, home addresses, and even personal credit ratings.

Millions of affected customers have since cancelled cards or applied for new ones.

Credit card usage is particularly high in South Korea, where the average adult has four or five cards.

The three-month ban on accepting new customers is the heaviest state penalty in the South's competitive credit card market, where customers often switch cards to get more benefits or rewards.

Many major South Korean companies have seen customers' data leaked in recent years, either by hacking attacks or their own employees.

An employee of Citibank Korea was arrested last December for stealing the personal data on 34,000 customers.

In 2012 two South Korean hackers were arrested for stealing data on 8.7 million customers at the nation's second-biggest mobile operator.

In November 2011 Seoul's top games developer Nexon saw the personal information on 13 million users of its popular online game MapleStory stolen by hackers.

In July the same year, personal data from 35 million users of Cyworld—the South's social networking site—was stolen by hackers.

Explore further: 20 million people fall victim to S. Korea data leak

add to favorites email to friend print save as pdf

Related Stories

S. Korea vows harsh penalties for data leaks

Jan 22, 2014

South Korean regulators Wednesday vowed harsh corporate penalties for data theft, as angry customers swamped credit card offices for a third day after 20 million people had their financial information stolen.

Recommended for you

We need new laws to govern cyberwarfare

Aug 21, 2014

President Bush is reported to have said: "When I take action, I'm not going to fire a US$2m missile at a US$10 empty tent and hit a camel in the butt. It's going to be decisive." As the quote suggests, when ...

US won't reveal records on health website security

Aug 19, 2014

The Obama administration has concluded it will not publicly disclose federal records that could shed light on the security of the government's signature health care website because doing so could "potentially" allow hackers ...

User comments : 0