PIPC Imposes 9.6 Billion Won Fine... Lotte Card to Pursue Objection Procedures After Reviewing Decision

Last Year’s Data Breach Exposed 2.97 Million Records
PIPC Plenary Session Imposes 9.6 Billion Won Fine
"We Will Do Our Utmost to Prevent Recurrence and Protect Personal Information"

Lotte Card, which was fined 9.6 billion won by the Personal Information Protection Commission (PIPC) last year due to a large-scale personal data breach, has announced its intention to pursue all available objection procedures going forward.

Immediately following the PIPC's decision on March 12, Lotte Card stated, "We deeply apologize once again for the inconvenience and concern caused by last year's cyber intrusion incident," adding, "We will do our utmost to prevent recurrence and to further strengthen personal information protection."

Previously, on March 11, the PIPC convened its 4th plenary session and decided to impose an administrative fine of 9,620 million won and a penalty of 4.8 million won on Lotte Card in response to the personal and financial information leak affecting 2.97 million people. The PIPC began its investigation after being notified by the Financial Supervisory Service in September last year regarding a report of Lotte Card's personal credit information leakage. The investigation confirmed that the hacking of Lotte Card’s online simple payment system resulted in the exposure of resident registration numbers of 450,000 individuals.

Lotte Card emphasized that it voluntarily reported the incident and fully cooperated with the commission's investigation, but also expressed its view that certain explanations, such as the legal basis for the sanctions, were not sufficiently reflected. Accordingly, the company stated it would thoroughly review the details upon receipt of the decision and continue to present its case through all possible objection procedures.

Objections to the PIPC’s decision must be filed within 30 days of receiving the notification. If the objection is denied, further recourse is available either by filing an administrative appeal with the Central Administrative Appeals Commission or by initiating administrative litigation with the Seoul Administrative Court.

This content was produced with the assistance of AI translation services.