Below are some of the most frequently asked questions on the financial data leak and advice on possible countermeasures. ― Ed. 


Q: How do I know if my personal information has been leaked?

A: Consumers may refer to their personal information page on the website of the corresponding card companies ― KB Kookmin Card (http://kbcard.com), Lotte Card (http://www.lottecard.co.kr), and NH NongHyup Card (http://card.nonghyup.com). Automated customer response services are available but the connection is slow due to the surge in customer inquiries. The three card companies will also send notices via post and email to those whose information has been leaked.

Q: Can my personal information be leaked even if I’m not subscribed to one of the three disputed cards?

A: Yes. Financial holding companies often share their customer information with their subsidiaries. Also, information for customers who no longer use the credit cards may remain in the company databases.

Q: Can someone withdraw money from my bank account using the leaked information?

A: The possibility is slim because in order to do an account transfer, one needs certificate verification, security card access and a password, all of which were not included in the recent information leak.

Q: Can someone use the leaked information for teleshopping or online shopping?

A: With Lotte and NongHyup cards, which have leaked both serial numbers and expiration dates, this may be possible. But teleshopping payments usually require additional security processes, such as mobile certification or a separate password. In the case of overseas online shopping, the danger is more plausible and the user is advised to immediately report to the corresponding card company, should an unidentified overseas payment be notified through SMS.

Q: Are consumers required to have their cards reissued?

A: In the case of consumers whose card serial numbers and expiration date have been leaked simultaneously, yes.

Q: Does changing the password help prevent possible losses?

A: Yes. In particular, customers whose passwords resemble their residential registration number, phone number, address or other personal information are advised to change their passwords as quickly as possible.

Q: What are the compensation measures suggested so far?

A: When a consumer is confirmed to have financial damage because of the information leak, the responsible company is to offer full monetary compensation. One may report damages either directly to the customer call center of the card company or to the Financial Supervisory Service. Also, customers should avoid giving out personal information to unidentified calls which claim to represent banks, card companies or financial authorities. The caller number for KB Kookmin card is 1588-1688, and that for Lotte Card is 1588-8100. NongHyup does not send out notices through phone calls or mobile text messages.

By Bae Hyun-jung (tellme@heraldcorp.com)