Back Biz.Chosun

Kmcc concludes kt hacking probe, weighs new-subscriber ban in South Korea

Biz.Chosun • October 12, 2026

Chairperson Kim Jong-chul said on Oct. 12 at the National Assembly's Science. ICT. Broadcasting. and Communications Committee audit that the investigation had concluded in response to questions from People Power Party lawmaker Cho Kyung-tae, and noted that internal procedures are underway. The Korea Media and Communications Commission (KMCC) sent KT a corrective action plan on Sept. and plans to decide the measures after deliberation and a vote by the commission.

The issue that day was whether KT to customers that its service was safe even while aware of signs of intrusion. Cho said a government probe found that KT's poor security management of femtocells last year led to leaks of personal information and unauthorized small-sum charges, and that KT deleted malware without reporting the infections. He also pointed to suspicions that reports were filed inaccurately during the deletion of server logs and disposal of servers suspected of compromise.

Cho argued that in this situation, KT's announcement at a customer briefing in July last year that the "BPFdoor" malware had not been found on its servers could amount to deceiving users.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

KT Faces Prosecution Over Malware Breach and Log Deletion KT, a major South Korean telecommunications company, is facing prosecution after its Chief Privacy Officer ordered the deletion of logs related to a malware breach that occurred in March 2024. The Personal Information Protection Commission (PIPC) found that KT failed to report the breach and neglected to analyze the personal information leak. The malware was installed via an SQL injection attack on KT's roaming website, allowing unauthorized access to employee information. Despite recognizing the breach in March 2024, KT took internal measures without notifying the government and later deleted logs on 10 servers, claiming it was part of routine maintenance. The PIPC has filed a complaint against KT for submitting false materials during the investigation. The investigation concluded with discussions about potential sanctions, including a ban on new subscribers. 2 sources 55

Extracted Entities

Attack Types (2)

Data Breach Malware

Companies (1)

Kmcc concludes kt hacking probe, weighs new-subscriber ban in South Korea

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Countries (1)

CWE Weaknesses (1)

Malware (1)

MITRE ATT&CK (1)