Archive — US — techcrunch
A timeline of South Korean telco giant SKT’s data breach
In April 2025, SK Telecom (SKT) suffered a significant cyberattack, compromising personal data of approximately 23 million customers. SKT anticipates mass contract cancellations, potentially costing up to $5 billion. A joint investigation is underway, revealing various types of stolen data, including SIM-related details, leading to heightened risks for customers. The breach is believed to involve vulnerabilities exploited by state-backed hackers.
Key points
- April 18, 2025: Unusual activity detected by SKT.
- April 19, 2025: Data breach confirmed in home subscriber server.
- April 20, 2025: SKT reported the breach to Korea's cybersecurity agency.
- April 22, 2025: Confirmed potential data breach involving USIM data.
- April 28, 2025: SKT started replacing affected SIM cards but faced shortages.
- May 1, 2025: Investigations hint at involvement of China-backed hackers via Ivanti VPN.
- May 6, 2025: New malware discovered in subsequent investigations.
- May 7, 2025: SK Group chairman publicly apologizes for breach.
- May 8, 2025: 250,000 customers switched providers, with warnings about further losses.
Why it matters
- Increased frequency of cyberattacks on telecom networks reflects a global trend toward heightened cybersecurity threats.
- The breach parallels significant incidents at other firms, indicating a growing need for robust data protection measures.
- In 2025, the importance of secure communication infrastructures became a focal point, especially with rising geopolitical tensions and the potential for state-sponsored cyber activities.
The SK Telecom data breach underscores the vulnerability of large telecom operators and highlights the critical need for advanced cybersecurity strategies to protect sensitive consumer information amidst increasing cyber threats globally.