SKT Downplayed Hacking Damage... No Mention of 'USIM' During Four-Minute Call

During the Call with KISA Right After the Report on the 20th
"Assumed Only Phone Numbers Were Included"

Amid a data breach involving USIM (Universal Subscriber Identity Module) information at SK Telecom, the largest mobile carrier in South Korea, allegations have emerged that SKT downplayed the scope of the incident.

According to a transcript of a phone call between SKT and the Korea Internet & Security Agency (KISA), obtained by Democratic Party lawmaker Choi Minhee's office on the 25th, SKT did not disclose the USIM information leak when asked about the personal data breach. Instead, SKT stated, "We assume at least phone numbers may have been included." The word "USIM" was not mentioned even once during the entire four-minute call.

This call took place on the 20th at 4:46 p.m., immediately after the incident was reported. SKT had internally become aware of the USIM-related data leak on the 19th at 11:40 p.m.

Lawmaker Choi stated, "It is a very serious matter that SKT was already aware of the USIM information leak but reported it in a minimized manner," and added, "We will thoroughly investigate who planned this downplaying of the report and who ultimately gave the instructions."

Meanwhile, the National Assembly's Science, ICT, Broadcasting and Communications Committee will hold a hearing on May 8 to address the SKT USIM hacking incident. The hearing is expected to focus on allegations of downplaying and concealing the response process, as well as to demand the waiver of penalties for contract termination. At the previous day's hearing, lawmaker Choi stated, "Lawmakers from both the first and second largest parties are demanding a waiver of number portability penalties, but SKT keeps responding with 'We will review it,' dragging the issue out." She continued, "This is because the decision-maker is not present, so SKT Chairman Choi must be required to attend the standalone hearing."