[25.12.21] SKT Ordered to Compensate Hacking Victims…100,000 KRW Per Person

SKT Ordered to Compensate Hacking Victims…100,000 KRW Per Person

📍Korea Consumer Agency confirms SK Telecom’s liability for personal data breach; compensation includes discounts and reward points

The Korea Consumer Agency’s Consumer Dispute Settlement Committee has issued a compensation decision regarding the large-scale personal data breach at SK Telecom. The committee ruled that each applicant should receive compensation worth 100,000 KRW and affirmed SK Telecom’s responsibility for the incident. The decision may extend to non-participating victims if SK Telecom accepts the proposal.

The Korea Consumer Agency’s Consumer Dispute Mediation Committee has decided on a compensation plan worth 100,000 won in connection with the personal information leakage incident that occurred at SK Telecom in April.

---

🔹 Background of the data breach and investigation results
In April, SK Telecom’s Home Subscriber Server was hacked, leading to a massive personal data leak. A joint government-private investigative team confirmed damages in July, and the Personal Information Protection Commission followed with its own administrative measures. Based on these findings, the Consumer Dispute Settlement Committee recognized SK Telecom’s responsibility and prepared the compensation plan.

🔹 Class action request and compensation items
Fifty-eight consumers filed a collective dispute settlement request in May, demanding compensation and preventive actions. The committee ruled that each claimant should receive a 50,000 KRW discount on telecommunications fees and 50,000 KRW worth of T-Plus reward points. The compensation level aligns with prior large-scale data breach precedents.

🔹 SK Telecom’s prior compensation and adjustments
SK Telecom had already implemented a “customer appreciation package” in August, offering a 50% fee discount and an additional 50GB of data. Therefore, the value of already-received discounts will be deducted when calculating the final compensation amount.

🔹 Potential nationwide compensation scale
If SK Telecom accepts the committee decision, compensation could extend to approximately 23 million victims. The scale is estimated at about 2.3 trillion KRW. The company must notify the committee within 15 days of receiving the decision. If accepted, the settlement gains legal effect and resolves the dispute; refusal may lead to civil litigation.

🔹 Need for preventive and corrective measures
The committee emphasized the necessity of voluntary compensation and technological improvements to prevent recurrence. With personal data leaks emerging as a recurring national concern, stronger cybersecurity compliance and accountability across the telecommunications sector are increasingly expected.

🔹 SK Telecom’s current stance
SK Telecom stated that it will review the committee’s proposal carefully before making a decision. However, the company previously rejected a separate compensation proposal of 300,000 KRW per person from the Personal Information Protection Commission, raising questions about whether it will accept the current plan.

One-line summary : The Consumer Dispute Settlement Committee ordered SK Telecom to compensate data breach victims 100,000 KRW per person, with potential extension to all affected users nationwide.