Lotte Card Completes Reissuance of Cards for Customers at Risk of Unauthorized Use After Hacking Incident

"No Attempts at Unauthorized Use or Consumer Damage"
"Full Compensation for Cyber and Secondary Damages"

Lotte Card announced on October 13 that it has completed the reissuance of cards for 280,000 customers who may have been subject to unauthorized use through key-in transactions following the hacking incident that occurred in August.

Cho Jwajin, CEO of Lotte Card, is making a public apology for the hacking incident and customer information leakage of Lotte Card at the Booyoung Taepyeong Building in Jung-gu, Seoul on the 18th. 2025.9.18 Photo by Kang Jinhyung

The Lotte Card hacking incident resulted in the leakage of personal information of 2.97 million people. The total volume of leaked data is approximately 200GB. Among them, information such as card numbers, two digits of passwords, and unique verification numbers (CVC-the three-digit number on the back of the card) was leaked for 280,000 customers.

Lotte Card completed the reissuance process for these 280,000 customers from September 1 through the day before the announcement. The number of reissuance requests was 216,182, and all 215,240 requests, excluding 942 special cards, have been processed. Including password changes, card suspensions, and cancellations, protection measures have been completed for approximately 230,000 customers.

For customers who have not yet applied for card reissuance, the company plans to restrict the use of the affected cards at online merchants starting October 15, thereby fundamentally blocking the possibility of unauthorized transactions.

For all customers, Lotte Card has completed 1,191,430 reissuances, accounting for 98.4% of the 1,211,346 requests received.

Among the 2.69 million customers whose information was leaked, excluding the 280,000 most affected, measures such as card reissuance applications, password changes, card suspensions, and cancellations have been completed for 1,456,967 people, which is 49% of that group.

Lotte Card stated that, to date, there have been no confirmed cases of attempted unauthorized use or actual consumer damage resulting from the cyber breach.

A Lotte Card representative said, "We will take full responsibility and compensate the entire amount for any damages caused by the cyber incident," adding, "If any secondary damages related to the customer information leakage are confirmed, we will also provide full compensation."

This content was produced with the assistance of AI translation services.