South Korean credit card company Lotte Card reports cyberattack
Learn More
Lotte Card, South Korea's fifth-largest credit card company with over 9.6 million members, reports a cyberattack that occurred in October 2024.
The company detected malicious code on one of its servers during a system inspection on October 26, 2024. The investigation identified and removed malware on three servers. On October 31, traces of an external attempt to extract data from its online payment server were also discovered, and the incident was reported the same day to the authorities.
Regulators estimate that approximately 1–2GB of data may have been affected. The company claims that based on its internal investigation to date, there is no confirmation that customer information or other personal data has been compromised.
The nature of the attack is not disclosed.
Lotte Card has engaged external investigation companies to conduct a forensic analysis and is working closely with authorities.
Update - as of 17th of September 2025, Lotte Card reports that the data breach is affecting 2.97 million. Over 280,000 customers have theor complete payment information including card numbers, CVCs, and passwords compromised.
