01
Read the notice — and save it
Keep the company or regulator notice, its date, the types of data involved, and any case number. It helps you distinguish genuine follow-up from a scam and makes a later complaint easier.
Practical guide
What to do after a data incident.
A breach notice can be unsettling. The useful response is usually calm, specific, and ordered: secure the exposed account, then guard the information that could be used to impersonate you.
A response checklist
Six steps that cover most situations
02
Change the exposed account first
Use a new, unique password. If you reused it anywhere else, change those accounts too. Prefer a password manager and turn on two-factor authentication or a passkey when the service offers it.
03
Protect your phone number
If a phone number, birth date, or identity information may be involved, be especially sceptical of SIM-swap, account-recovery, and delivery messages. Never read a verification code to an unsolicited caller.
04
Watch payment activity
For exposed payment or bank information, review transactions and contact the issuer using the number on your card or its official app — never a link in a message. Ask what monitoring or replacement options are available.
05
Expect convincing phishing
A real breach gives criminals context. Treat messages that create urgency, request a code, ask you to install an app, or send you to a login page as suspicious. Navigate to the service yourself instead.
06
Report harm and preserve evidence
Screenshot fraudulent messages, keep transaction records, and report suspected misuse promptly. For privacy issues in Korea, KISA’s Privacy Infringement Report Center and the 118 helpline are official starting points.
Use the right response
Match your actions to the data involved
Password or account ID
Reset it immediately; change any reused password; add two-factor authentication. Be wary of account-recovery emails.
Phone number or identity data
Expect targeted impersonation. Never approve a login, SIM change, or verification code you did not initiate.
Payment or bank data
Review transactions, contact the issuer through an official channel, and follow its instructions on replacement or monitoring.
Official Korean resources
Where to get help
KISA Privacy Infringement Report Center
Information and online reporting for privacy infringement in Korea.
privacy.kisa.or.kr ↗KISA 118 helpline
KISA’s official cyber and privacy consultation channel.
kisa.or.kr/118 ↗This guide is general information, not legal, financial, or security advice for a specific case. Follow official instructions from the affected organisation and authorities.