 |
Photo courtesy of Yonhap News |
[Alpha Biz= Kim Jisun] Seoul, September 15, 2025 — It has been confirmed that SecureKey, an external security contractor for LG Uplus, reported a hacking incident to authorities, despite KT and LG Uplus both previously denying any breach. The revelation has raised fresh questions about the limitations of current regulatory frameworks and the accountability of corporations in cybersecurity management.
According to government and parliamentary sources on the 15th, SecureKey voluntarily reported a system intrusion to the Korea Internet & Security Agency (KISA) on July 31 and received technical support the following day.
Earlier, U.S. hacking journal Phrack disclosed evidence of personal data leaks at KT and LG Uplus, noting that the breach at LG Uplus stemmed from the compromise of SecureKey’s account credentials.
According to Phrack, the intrusion led to the leakage of LG Uplus’s APPM (Account Privilege and Password Management) system source code, internal databases, details of 8,938 servers, 42,526 user accounts, and personal information of 167 employees and contractors. KT was also found to have suffered a leak of web service server certificates and private key files.
Data submitted by the Office of Rep. Park Choong-kwon of the National Assembly’s Science, ICT, Broadcasting and Communications Committee confirmed that KISA verified the leakage of APPM source code and related data used by LG Uplus. KISA has since provided the compromised files to SecureKey.
Alphabiz Reporter Kim Jisun(stockmk2020@alphabiz.co.kr)
