Group leader of SK Gram refuses attendance at parliamentary hearing on SKT hacking scrutiny.
In April 2025, SK Telecom, a South Korean telecommunications giant, suffered a cyberattack that targeted its internal systems. The hack occurred on April 19 at around 11 pm local time, possibly to take advantage of lower system monitoring during off-peak hours [5].
The malware that penetrated SK Telecom's defenses allowed hackers to access data related to millions of customers' Universal Subscriber Identity Module (USIM) cards [2][5]. There's a suspected connection to hacker groups associated with China, as similar attacks exploiting Ivanti VPN system vulnerabilities have been observed worldwide, including in South Korea [1].
Immediate Actions Taken
Upon discovery of the breach, SK Telecom acted swiftly. They deleted the malware and isolated compromised network servers. To protect their customers, they are offering free SIM replacements and protective services to the approximately 25 million affected subscribers [2][4].
In addition to their internal response, SK Telecom has cooperated with the Korean Internet & Security Agency (KISA) and other relevant authorities [5]. An ongoing investigation aims to clarify whether this was a ransomware attack or if any ransomware group has claimed responsibility [4].
SK Telecom's swift action and cooperation suggest a commitment to customer protection and regulatory compliance.
General Security Measures
While specific details about SK Group's enhanced security measures following the cyberattack aren't publicly available, typical responses from similar companies include updating software and hardware regularly, conducting thorough risk assessments, collaborating with cybersecurity experts, and offering employee training on security practices to minimize future breaches.
As hacking incidents continue to escalate, companies must remain vigilant and proactive in their cybersecurity efforts. While SK Telecom's response was immediate, the long-term implications of the breach could persist if preventative measures aren't consistently reinforced.
- The cyberattack on SK Telecom, a South Korean business giant, has sparked a major industry-wide overhaul in security measures, as companies must remain vigilant and proactive to prevent future breaches.
- Chey, the CEO of SK Telecom, has expressed commitment to regulatory compliance and customer protection, offering free SIM replacements and protective services to the 25 million affected subscribers.
- The malware that infiltrated SK Telecom's systems was likely associated with hacker groups linked to China, and similar attacks exploiting Ivanti VPN system vulnerabilities have been reported worldwide including in Seoul.
- The investigation into the SK Telecom hack is ongoing, with the Korean Internet & Security Agency (KISA) and relevant authorities involved, aiming to determine if this was a ransomware attack or if any group has claimed responsibility.
