Lotte Card, hit by personal information leak, faces 1.5-month business suspension and a 5 billion won fine finalized

The Financial Services Commission has finalized sanctions over Lotte Card’s massive personal data breach.

Lotte Card will be suspended from new-member card business from Aug. 1 to Sept. 15 and fined 5 billion won.

A hacking attack in September last year exposed credit information of 2.97 million customers, with violations including unpatched security systems, no encryption, and no antivirus installation.

Authorities also plan broader security rule changes, including punitive fines and stronger CISO authority.