Lotte Card breach has become more serious than first announced, according to financial regulators in South Korea. Officials revealed that personal data, including card records, may have been exposed on a large scale.
The company, which serves around 9.6 million members, disclosed a cyberattack earlier this month. Since then, regulators and the company have worked together to measure the extent of the damage. However, new findings suggest the breach is larger than initially expected.
The Financial Supervisory Service confirmed that the size of the data leak and the level of harm were both underestimated. An official explained that investigators are moving quickly and plan to announce results soon.
This Lotte Card breach comes at a time when South Korea’s financial sector already faces rising threats from hackers. Recently, SGI Seoul Guarantee also suffered a similar cyberattack, further raising concerns about systemic risks.
Moreover, the incident highlights the growing importance of cybersecurity in protecting consumers. Lotte Card’s lapse has fueled criticism about whether firms are investing enough in digital defenses. Financial Supervisory Service Governor Lee Chan-jin has urged companies to reinforce their systems and prioritize customer safety.
Industry experts warn that breaches like this could weaken trust in financial institutions. Customers may begin questioning how secure their information is within major corporations. In addition, the breach could trigger stronger regulatory actions aimed at preventing future attacks.
Despite the challenges, regulators stressed their commitment to restoring public confidence. They emphasized that firms must treat cybersecurity as a central responsibility rather than a secondary concern. Furthermore, they signaled closer monitoring of financial companies moving forward.
The Lotte Card breach not only exposed sensitive data but also tested the resilience of South Korea’s financial safeguards. Authorities believe swift responses and stronger protections can help limit the fallout while preparing the sector for new threats.

