Republic of Korea: Personal Information Protection Commission investigation into Sectanaine Ltd. over alleged data breach from credential stuffing attack

Progress

Current status
in force
12 Feb 2025 in force

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

12 Feb 2025
in force

Personal Information Protection Commission issued a ruling with a fine against Sectanaine Ltd. for data breach from credential stuffing attack

On 12 February 2025, the Personal Information Protection Commission issued a ruling against Sectanine Ltd. with a penalty of KRW 14.77 billion and a fine of KRW 7.2 million for violations of personal data protection laws. The ruling applies to two d…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.