[2025 Audit] SKT Reassessed, KT and LG Uplus Criticized... Diverging Fates for the Three Major Telecoms (Comprehensive)

SK Telecom's Response After Hacking Incident Reassessed at National Assembly Audit
KT and LG Uplus Criticized for Inadequate Handling
KT CEO Kim Youngsub: "Will Take Appropriate Responsibility After Resolving the Situation"

The fate of the three major telecommunications companies diverged at the National Assembly audit of affiliated agencies conducted by the Science, Technology, Information and Broadcasting and Communications Committee on the 21st. SK Telecom, which experienced a USIM (Universal Subscriber Identity Module) information leak in April, was reassessed for its relatively proactive response, while KT and LG Uplus were criticized for their inadequate handling of information leakage incidents.

Yoo Sangyoung, CEO of SK Telecom, responded to a question from Assemblyman Park Junghoon of the People Power Party, who asked, "All three telecom companies were breached, but you were the first to voluntarily report it, took the brunt of the criticism, and bowed your head in apology. Why did you report it first?" Yoo replied, "I understood that it was a legal obligation." When asked why he thought other telecommunications companies did not report voluntarily and quickly, he said, "I am not well aware of the internal circumstances at other companies."

The representatives of the three major mobile carriers, Jo Jwajin, CEO of Lotte Card, and Kim Kwangil, CEO of MBK Partners, attended the National Assembly audit related to the hacking incident held by the Science, Technology, Information and Broadcasting and Communications Committee at the National Assembly in Yeouido, Seoul, on the 21st. From right to left: Kim Youngseop, CEO of KT; Yoo Sangyoung, CEO of SK Telecom; Kim Kwangil, CEO of MBK Partners; Jo Jwajin, CEO of Lotte Card; and Hong Beomsik, CEO of LG Uplus. October 21, 2025. Photo by Kim Hyunmin

Assemblyman Park pointed out, "SK Telecom reported first and suffered all the disadvantages and much harsher criticism alone. Other companies also caused harm to customers and made the public anxious, so they should respond accordingly."

Park then summoned Hong Beomsik, CEO of LG Uplus, and asked why the company was the last to identify the hacking incident. Hong explained, "I received a report indicating signs of a breach, and I understood that it was appropriate to report once the facts were confirmed through investigation."

When Assemblywoman Lee Haemin of the Rebuilding Korea Party asked whether he would report the hacking signs to the Korea Internet & Security Agency (KISA), Hong replied, "I will do so." Previously, even though signs of customer data leakage were detected through U.S. hacking magazine 'Phrack' and other sources, LG Uplus had denied any signs of hacking.

Hong stated, "We are currently under continuous investigation by the Ministry of Science and ICT and KISA," and added, "As far as I know, the breach has not yet been confirmed." In response, Assemblyman Lee criticized, "Recently, hackers have been avoiding leaving log records or deleting them after hacking. In such circumstances, you cannot know how the information was leaked, and by mixing your words, you are showing disregard for the chairperson of the standing committee."

KT, which suffered both actual financial losses and personal data breaches for its customers due to illegal micro base station (femtocell) hacking, faced intense criticism from lawmakers. Assemblywoman Hwang Jeonga of the Democratic Party of Korea pointed out that the number of victims of unauthorized micro-payments and personal data breaches at KT continues to rise, and that the timing of the first illegal femtocell connection differs from previous announcements.

Assemblyman Noh Jongmyeon of the Democratic Party of Korea also compared the response to the SK Telecom USIM hacking incident in April with KT's response, stating, "After recognizing the breach, it took SK Telecom 42 hours to respond, while KT took at least seven days. SK Telecom notified all customers via text message within three days, but KT is only informing those who suffered micro-payment damages."

Choi Minhee, Chairperson of the Science, Technology, Information and Broadcasting and Communications Committee and a member of the Democratic Party of Korea, also pointed out, "There have been cases, even as recently as early this month, where KT retail stores used the SK Telecom hacking incident and the waiver of penalty fees for marketing purposes." Kim responded that immediate action would be taken.

There were also repeated calls for Kim to resign. When Assemblyman Kim Wooyoung of the Democratic Party of Korea demanded that Kim take responsibility for the incident and step down immediately, Kim replied, "The most urgent task right now is to resolve the situation. Once the situation is under control to a certain extent, I believe I should take reasonable and appropriate responsibility."

When Assemblyman Noh Jongmyeon of the same party asked, "Does taking appropriate responsibility include resignation?" Kim answered, "I did not mean to exclude resignation," and added, "It is a responsibility that includes resignation." When Assemblywoman Hwang Jeonga of the same party asked, "Will you resign after resolving the situation? Does taking appropriate responsibility mean you will step down?" Kim closed his eyes and nodded.

In response to Assemblywoman Hwang's question about whether penalty fees would be waived for all customers, Kim said, "We will make a decision after comprehensively considering the final investigation results and the extent of customer damages," and added, "We intend to begin compensation for financial damages caused by personal data breaches."