Overview

• KT’s report to Rep. Hwang Jung-a shows the breach extended to southern Seoul and Goyang, beyond the initially cited southwestern Seoul and parts of Gyeonggi.
• KT revised its tally to 362 victims and 764 unauthorized transactions, including nearly 100 on Sept. 4–5 before abnormal attempts were blocked early Sept. 5.
• KT says it is counting cases tied to intercepted ARS authorization calls, and experts warn the damage may be larger if other attack vectors were involved.
• Some victims reported unauthorized PASS identity verifications and unapproved logins to apps such as KakaoTalk, raising concerns about wider vulnerabilities.
• Rep. Hwang criticized incremental disclosures and urged a full investigation and direct user alerts, as the government moves to strengthen penalties and allow probes without company notification.