Intrusion into STO's customer messaging system used to send smishing texts
An outsider accessed STO's information network and used its customer messaging system to send all customers smishing texts disguised as traffic fine notices. The Korea Internet & Security Agency (KISA) confirmed that the app linked in the texts was a malicious app capable of stealing personal data and remotely controlling smartphones. The company apologised, reported the incident to KISA and requested a police investigation, and no leak of customer information was confirmed.
Key facts
- Affected organisation
- STO
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Smishing texts sent to all customers
- Cause / method
- Outsider's access to the information network and abuse of the customer messaging system
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- STO apologised for smishing texts sent from its customer service number, reported the incident to the Korea Internet & Security Agency and requested a police investigation.
- The Korea Internet & Security Agency confirmed that the app linked in the texts could steal personal data and remotely control smartphones.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.