SK Planet Gifticon Data Breach Exposes Names, Phones, Refund Accounts

SK Planet has confirmed signs that subscriber data was leaked from its Gifticon mobile voucher service. The suspected exposure includes not only names and phone numbers but also financial details such as refund bank accounts.

According to the company, it detected abnormal external access at around 6:40 p.m. on October 28 and blocked it. SK Planet is now conducting a detailed investigation to determine whether data was actually taken and how many customers are affected.

What may have been exposed

In a text message titled "Notice of personal data leak and response measures" sent to customers on October 29, the company said some users' names, phone numbers, email addresses, purchased coupon serial numbers and refund accounts appear to have been leaked. The exact scale and the list of affected customers have not been determined.

SK Planet plans to discard all Gifticons confirmed as compromised and reissue them safely to customers. It also said it will fully compensate customers who suffer actual losses from the incident.

What customers should do

Because names, phone numbers and email addresses may be in the wrong hands, the company warned of secondary harm such as smishing and phishing. It urged users not to click links from unknown sources and to ignore any contact that asks for personal or financial information.

Once the investigation ends, SK Planet will send individual text messages and post a notice on its website explaining what was leaked and how to check whether a customer was affected. A dedicated response line and email address have been set up; phone support runs on weekdays from 10 a.m. to 5 p.m.

Victims can also apply for dispute mediation with the Personal Information Dispute Mediation Committee or request relief through the personal information infringement report center. SK Planet apologized, saying it takes the matter seriously and will thoroughly review its security systems to prevent a recurrence.