[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flxlgDTzaVz5CHUKke3NW1IZDqRW685-Xiwefk7UePWU":3},{"article":4,"iocs":52,"watch_terms":57,"solutions":58,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"43bd5001-53fd-46b5-b4b2-945669265775","South Korea fines telco giant KT $39 million for customer data breach","south-korea-fines-telco-giant-kt-39-million-for-customer-data-breach-a91a75","South Korea's Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million) over data protection violations. [...]","South Korea's PIPC has fined KT Corporation $39 million for a data breach that exposed personal information of over 16,000 subscribers and led to fraudulent mobile payments. The breach persisted for nearly 11 months due to inadequate security controls on femtocells. Additionally, KT was fined for failing to report a BPFDoor malware infection on its servers, which was discovered in March 2024.","South Korea fines KT Corporation $39 million for data breach and malware violations.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fsouth-korea-fines-telco-giant-kt-39-million-for-customer-data-breach\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F30\u002Fkt.jpg","2026-07-30T22:28:30+00:00","2026-07-31T00:00:16.028823+00:00",8,[17,20,23,26],{"name":18,"type":19},"KT Corporation","vendor",{"name":21,"type":22},"Red Menshen","threat_actor",{"name":24,"type":25},"femtocell","product",{"name":27,"type":28},"BPF","technology","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":29,"icon":31,"name":32,"slug":33},null,"Policy","policy",[35,40,42,47],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[53],{"type":54,"value":55,"context":56},"malware","BPFDoor","Stealthy Linux and Solaris backdoor used in the KT network compromise.",[18,24],{"controls":59,"vendors":139},[60,81,110],{"slug":61,"name":62,"problem":63,"products":64},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[65,73],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":82,"name":83,"problem":84,"products":85},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":111,"name":112,"problem":113,"products":114},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":154},"kt-corporation-fined-39m-after-11-month-femtocell-breach-goes-unreported","KT Corporation Fined $39M After 11-Month Femtocell Breach Goes Unreported","KT Corporation's failure to implement adequate security controls on femtocell devices allowed attackers to harvest personal data from over 16,000 subscribers and conduct fraudulent mobile payments for nearly 11 months — a clear configuration management failure. Compounding the breach, KT failed to report a BPFDoor malware infection to regulators, violating South Korea's mandatory incident disclosure requirements. This case illustrates how insecure network edge devices can serve as persistent footholds when not properly hardened and monitored. The regulatory penalties highlight that both the breach itself and the failure to report are independently punishable offenses, making timely incident response not just a technical obligation but a legal one.",[145,146,147,148,149,150,151,152,153],"CIS Control 4 - Secure Configuration of Enterprise Assets and Software","CIS Control 13 - Network Monitoring and Defense","NIST SP 800-53 CM-6 (Configuration Settings)","NIST SP 800-53 IR-6 (Incident Reporting)","NIST SP 800-53 SI-3 (Malicious Code Protection)","NIST Cybersecurity Framework DE.CM-7 (Monitoring for Unauthorized Activity)","GDPR Article 33 (Notification of a Personal Data Breach to Supervisory Authority)","South Korea Personal Information Protection Act (PIPA) Article 34","ITIL Service Operation - Event Management",{}]