In April, SK Telecom in South Korea experienced a cyberattack resulting in the theft of data of approximately 23 million customers.
SKT's CEO mentioned that around 250,000 users switched providers post-breach, a number expected to rise to 2.5 million if cancellation fees are waived.
The potential financial impact could reach $5 billion over three years if cancellation fees are not enforced.
SKT is actively investigating and considering this incident as its most severe security breach.
Investigations by public and private entities are ongoing to determine the cause of the breach.
Sensitive personal data like phone numbers and unique identifiers were compromised, presenting risks of SIM swapping and surveillance.
SKT offered SIM card protection and replacements to prevent further damage following the breach.
No secondary damage has been reported, and there are no verified cases of customer data misuse on the dark web.
SKT detected abnormal activities on April 18, identified a breach on April 19, and reported it to authorities on April 20.
A cybersecurity notice instructed SKT to replace Ivanti VPN equipment suspected to be linked to the breach, possibly related to China-backed hackers.