LG Uplus-Developed AI Call Assistant Service
Personal Information of 36 Customers, Including Call Summaries, Leaked
Company Explains: "Summaries Stored on Server for Six Months for App Reinstallation"
Personal information, including call summaries, of 36 customers who subscribed to LG Uplus's self-developed artificial intelligence (AI) call assistant 'Iksio' has been leaked.
On December 6, LG Uplus announced in a press release that, during recent improvements to the Iksio service, a cache configuration error and worker negligence led to the exposure of personal information belonging to 36 customers.
The exposed information included the call recipient's phone number, the time of the call, and a summary of the call content. This data was temporarily visible to 101 other users.
The exposure occurred between 8:00 p.m. on December 2 and 10:59 a.m. on December 3. During this period, the information was accessible to 101 users who newly installed or reinstalled Iksio. For each individual, their information was exposed to between one and six other users.
An LG Uplus representative stated, "The leaked information did not include unique identifiers such as resident registration numbers or passport numbers, nor did it contain any financial information."
LG Uplus explained that after recognizing the issue at 10:00 a.m. on December 3, it immediately began identifying the cause and restoring the system, and has since ensured that call information is no longer visible.
Privacy Policy of LG Uplus 'Iksio' Service. Call summaries are stored for six months for AI service data backup, and full call transcripts have been transferred to Google, AWS, and Microsoft to improve service quality.
The company contacted all affected customers by phone, and those who could not be reached were notified via text message. LG Uplus also voluntarily reported the Iksio call information leak to the Personal Information Protection Commission.
Iksio, officially launched in November last year, is an AI call assistant service developed in-house by LG Uplus. It offers features such as visual caller identification, real-time voice phishing detection, and call recording and summarization, all provided in an on-device environment. The company has promoted the security advantages of on-device technology, which processes voice data locally on the device without passing through a server.
Regarding this, an LG Uplus official stated, "Call recordings are not stored on the server. However, to allow users to access call summaries even after reinstalling the Iksio app, the summaries are stored on the server for six months. This is clearly stated in the privacy policy."
A review of Iksio's privacy policy confirmed that while users' call voice data is not stored, detailed call summaries converted to text, AI smart summary results, and similar data are stored on the server for six months.
The specific items collected include detailed call summaries, single-line call summary information, keywords extracted from call records, AI tasks, AI conversation search chat inputs, AI conversation search results, and AI smart summary results.
Additionally, personal information such as full call transcripts and call summaries has been transferred to overseas big tech companies including Google, Amazon Web Services (AWS), and Microsoft. This data has been retained for one year and six months for the purpose of data analysis to improve service quality.
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
