SK Telecom Seeks Court Overturn of Record 135 Billion Won Data‑Breach Fine
Updated (2 articles)
SK Telecom Files Lawsuit One Day Before Challenge Deadline The Seoul Administrative Court received SK Telecom’s petition on Monday to annul the Personal Information Protection Commission’s (PIPC) August ruling. The filing arrived a day before the statutory deadline for contesting the fine, underscoring the company’s urgency. SK Telecom argues the penalty is disproportionate to the circumstances surrounding the breach [1].
Penalty Represents PIPC’s Largest Enforcement Action Since 2020 The commission imposed a 135 billion‑won fine, the highest ever levied since the regulator’s 2020 inception. This amount exceeds the combined fines levied against Google and Meta in 2022, highlighting the breach’s perceived severity. The regulator justified the sanction as necessary to enforce robust data‑protection standards [1].
Company Claims Extensive Compensation and System Overhaul Expenditure SK Telecom reports spending roughly 1.2 trillion won on user compensation, including free USIM replacements, and on revamping its data‑security infrastructure. The firm states that no confirmed financial damages have been reported by affected users. It frames the lawsuit as a test of the regulator’s punitive approach rather than an admission of liability [1].
Regulator’s August Decision Stems From Nationwide User Data Leak The breach exposed personal information of all 23 million SK Telecom customers, prompting a comprehensive regulator probe. PIPC’s decision in August followed this extensive exposure, leading to the record fine. The incident has intensified scrutiny of South Korea’s data‑protection enforcement mechanisms [1].
Timeline
2020 – The Personal Information Protection Commission (PIPC) launches as South Korea’s dedicated data‑privacy regulator, setting the legal framework for future penalties on large‑scale breaches[1].
April 2025 – SK Telecom publicly discloses a massive leak of universal subscriber identity module (USIM) data, prompting regulators to open investigations and the company to offer free USIM replacements[2].
May 2025 – A mediation process involving 58 affected users takes place, laying the groundwork for later consumer‑compensation rulings[2].
August 2025 – The PIPC issues a record fine of 134.8 billion won against SK Telecom, the largest penalty since the commission’s 2020 inception, underscoring the regulator’s resolve after the April breach[2].
Dec 20 2025 – The Korea Consumer Agency orders SK Telecom to pay 100,000 won per user (a 50,000 won monthly discount plus 50,000 won credit), estimating a total payout of ≈2.3 trillion won, roughly 13 % of the firm’s 2024 sales[2]. The agency gives SK Telecom a 15‑day window to accept the verdict.
Jan 19 2026 – SK Telecom files a lawsuit with the Seoul Administrative Court, a day before the deadline, to overturn the PIPC fine. The company emphasizes that it has spent about 1.2 trillion won on user compensation and system reforms, and notes that “no confirmed financial damages to users have resulted from the leak,” framing the case as a test of the regulator’s penalty authority[1].