South Korea watchdog confirms 4.5-month business suspension for Lotte Card; FSC to decide

by Lee Seongjin Posted : April 30, 2026, 17:43Updated : April 30, 2026, 17:43
Yonhap photo
[Photo=Yonhap]
Lotte Card, which suffered a large-scale customer data leak in a hacking incident last year, has been ordered by South Korea’s Financial Supervisory Service to suspend business for 4.5 months.

According to the financial industry on Wednesday, the FSS confirmed the 4.5-month suspension in a sanctions review committee meeting held that day.

Lotte Card said about 2.97 million customers — roughly one-third of its total — had information exposed in a hack in September last year. Of those, 280,000 customers had key data leaked, including card numbers, expiration dates and CVC codes, creating a risk of fraudulent card use.

Earlier this month, the FSS gave Lotte Card advance notice of a sanctions package that included the 4.5-month suspension, a 5 billion won fine and personnel penalties.

The sanctions will be finalized after a vote at a regular meeting of the Financial Services Commission.

A Lotte Card official said the hacking case differs from a 2014 data leak involving an employee and called a business suspension for a hacking incident “an unprecedented level of sanction.”

The official said follow-up steps remain, including an FSC vote, and the company will explain its objections to what it views as an enhanced penalty, its post-incident response and that no secondary harm occurred.



* This article has been translated by AI.