South Korea’s Personal Information Protection Commission (PIPC) fines KT Corp. about 54 billion won (roughly $39 million) for privacy and data-protection violations linked to a major breach involving KT’s wireless network. According to the regulator, the breach exposed personal data of 16,647 users, specifically phone numbers and mobile device identification numbers. The PIPC says the incident involves illegal or unauthorized mobile base stations used to access KT’s network, and that malicious actors were able to obtain information without being detected for an extended period. The regulator says unauthorized access occurred between Oct. 8, 2024, and Sept. 5, 2025, and that KT identified the breach only after a user complaint. After the data was obtained, the information was used to attempt or carry out unauthorized transactions, resulting in losses totaling 240 million won across 368 victims. In addition to the fine, the PIPC orders KT to implement corrective actions, including strengthening security for its wireless network equipment and improving personal information protection measures. The company first reported the breach in September.