OPINION: Massive data breaches expose urgent need for stronger security and accountability

By Park Yong-jun Posted : December 5, 2025, 16:03 Updated : December 5, 2025, 16:03
Yonhap

SEOUL, December 5 (AJP) - In early 2026, a man received a phone call from an unknown caller who appeared to know every detail about him, including his home address, online habits, and shopping patterns. This incident shows how phishing has evolved from random attacks to highly targeted schemes that exploit detailed personal information.

Massive data breaches have affected millions in South Korea, involving major companies such as Coupang and SK Telecom. Similar incidents in the public sector are also on the rise, with more than 100 cases reported last year alone. Despite South Korea's technological prowess, personal data remains highly vulnerable.

The maximum compensation for data breaches is usually around 100,000 Korean won per person, regardless of the extent of data leaked, as proving corporate negligence is quite challenging for victims, leading to limited accountability.

The maximum compensation for data breaches is usually around 100,000 Korean won per person, regardless of the extent of the data leaked, because victims often struggle to prove corporate negligence, resulting in limited accountability.

Although fines and penalties have increased recently, most victims are barely compensated. Companies often treat such breaches as a cost of doing business and face only administrative orders, with fines flowing to state coffers rather than victims.

To address this issue, punitive damages must be effectively implemented. Current stringent requirements for proving intent or negligence make it difficult for individuals to succeed in lawsuits, which are particularly unsuitable for cases like large-scale data breaches.

Legal systems must evolve to meet the challenges of a rapidly changing era.

Coupang's latest data leak exposes serious gaps in security measures and legal compliance, even as companies continue to accumulate vast amounts of sensitive personal information.

It is not just about preventing hacking or data leaks, it is about ensuring that companies invest in security measures and provide adequate compensation. Without these changes, data breaches will continue.

Park Yong-jun, deputy editor
* This article, published by Aju Business Daily, was translated by AI and edited by AJP.

Copyright ⓒ Aju Press All rights reserved.