[Alpha Biz= Kim Jisun] Seoul – South Korea’s Personal Information Protection Commission (PIPC) announced on September 4 that it is reviewing whether to launch an investigation into alleged personal data leaks at KT Corp. and LG Uplus Corp.
The PIPC confirmed that it received a formal request for investigation earlier in the day from the Seoul YMCA, which raised concerns over potential customer data breaches involving the two telecom operators.
Commission Chairman Ko Hak-soo stated, “Whether to initiate a probe will be determined at our discretion. First, the working-level team will assess the situation, collect initial data, and conduct analysis before deciding if a full-scale investigation is warranted.”
The Seoul YMCA criticized the government’s handling of the matter, noting that regulators initially concluded there was “no damage” before reversing their position, causing public confusion. The group warned, “If evidence of breaches surfaces belatedly, subscriber damages could become irreparable.” It also highlighted limitations in the current Information and Communications Network Act, under which the government cannot easily conduct field investigations without voluntary disclosure by companies.
The call for a PIPC-led investigation comes amid heightened public anxiety, with advocacy groups urging swift and thorough fact-finding efforts.
LG Uplus has previously faced scrutiny for delayed disclosures, having concealed or postponed reporting of data breaches in 2018 and 2023, only admitting to them after being notified by the Korea Internet & Security Agency (KISA)—which later imposed fines.
Separately, during a National Assembly committee meeting on September 2, the Vice Minister of Science and ICT disclosed indications that KT had destroyed certain servers, further intensifying concerns.
Alphabiz Reporter Kim Jisun(stockmk2020@alphabiz.co.kr)
