"Carrier Authentication Was Never Used"... SKT USIM Hacking, Public Real Estate Systems Remain a 'Safe Zone'

Mainly Using Joint and Financial Certificates Instead of Carrier-Based Authentication
Korea Real Estate Agency, HUG, and LH: "Low Risk of Damage as PASS Authentication Is Not Used"

As concerns over personal information leaks grow across society following the SK Telecom (SKT) USIM hacking incident, it has been found that the real estate industry, which handles sensitive information, fortunately remains outside the scope of the impact. Although the likelihood of damage occurring is low, there is a heightened sense of vigilance due to the sensitive nature of the incident. This is because public real estate systems handle information on the entire population.

'Cheongyakhom', operated by Korea Real Estate Agency. You can log in using private authentication methods such as Naver, Kakao, KB Kookmin Certificate, Toss Certificate, and Shinhan Certificate, but carrier-based authentication methods like PASS are not provided. Screenshot of Cheongyakhom.

The most widely used platform among real estate consumers, 'Cheongyakhom', is operated by the Korea Real Estate Agency. Through this system, citizens can complete most subscription procedures online, including apartment subscription applications, checking results, viewing resident recruitment announcements, and calculating additional points. A representative from the Korea Real Estate Agency stated, "Cheongyakhom supports all authentication methods, including the accredited certificate (joint certificate), financial certificate, and simple authentication methods such as Kakao and Toss certificates," and added, "Carrier-based PASS authentication has never been provided, so there is no possibility of damage from USIM hacking."

The Housing and Urban Guarantee Corporation (HUG) is the institution responsible for public guarantee services such as jeonse deposit return guarantees, lease guarantees, and housing pre-sale guarantees. In particular, as it is possible to apply for jeonse guarantees non-face-to-face through the 'Safe Jeonse App', the security strength of the identity verification system is directly linked to the protection of users' assets. A HUG representative said, "Currently, identity verification is based on the financial certificate, and carrier-based authentication methods such as PASS are not used."

Korea Land and Housing Corporation (LH) plays a key role in national housing welfare, such as public housing supply and rental housing. It collects personal information through various housing welfare projects, including Newlywed Hope Town, youth jeonse rental, and purchase rental housing. An LH representative stated, "Subscription is conducted through Cheongyak Plus, so there is no direct risk of authentication-related damage. However, the secure management of mobile phone numbers collected for text notifications and other purposes is a critical issue," and added, "We strictly adhere to internal security training and management standards."