South Korea probes credit card company data breach affecting 3 million customers

Lotte Card suffered a significant data breach that exposed personal and financial data for roughly 3 million customers after attackers exploited an unpatched payments-server vulnerability present since 2017; the company detected the intrusion almost two weeks later, reported no unauthorized transactions so far, has begun notifying affected customers and reissuing cards, and faces regulatory investigation and political scrutiny over cybersecurity investment.