Incident record
롯데카드
Lotte Card · Finance
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
2.97M people
Disclosure recorded
2025-09-18
Sector
Finance
Practical risk
Critical
What this means
A practical reading of this record
The public record supports a critical practical risk level based on the currently reported scope and data categories. This can change if the organisation or regulator updates the record.
- Review card or bank activity and contact the issuer through its official channel if anything looks unfamiliar.
- Expect targeted phishing and account-recovery scams. Do not share verification codes with an unsolicited caller.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
Confirmed by the organisation, a regulator, or a documented official decision.
The current evidence record is: Lotte Card and Financial Services Commission.
Recorded source · Lotte Card and Financial Services Commission
Direct source links are being standardised in the source archive. Until then, this page names the current evidence basis rather than substituting a generic link.
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2025-09-18
The most recent dated event currently documented on this page.
Confirmed
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
Public disclosure recorded
This is the only dated public milestone currently stored for this entry. KR Data Watch will add later verification milestones when they are documented.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.