Skip to content

Digital certificate of CJ Group exploited in cyber assault allegedly orchestrated by North Korea actors.

CJ OliveNetworks, the IT subsidiary of South Korea's CJ Group, experienced a digital certificate leak, leading to its misuse in a cyberattack allegedly associated with North Korea. This information emerged from the statements made by cybersecurity experts on Wednesday.

Digital certificate of CJ Group exploited in cyber assault allegedly orchestrated by North Korea actors.

Article Rewrite

Title: 'Deep regret': SK Telecom's Chey Tae-won apologizes for massive data breach incident

  • Play video

Turn the sound on to hear more about the SK Telecom hacking scandal

Dive into the details of the infamous SK Telecom hacking incident, an unprecedented data breach that occurred on April 19, 2025, leaving an estimated 25 million subscribers vulnerable.

The cybercriminals leveraged sophisticated malware to infiltrate SK Telecom's internal network, putting their Home Subscriber Server (HSS) at risk. Although personal names and financial account details remained untouched, the leakage of crucial Universal Subscriber Identity Module (USIM) data could pave the way for SIM swapping[1][2].

Click here for a rundown of the impact and response

Impact and Response

Upon detection of the malware, SK Telecom swiftly removed it and isolated the affected systems. The company also notified the Korea Internet Security Agency (KISA) and kickstarted an ongoing investigation[1][2]. To mitigate potential risks, SK Telecom is offering free SIM card replacements and enhanced protection services to its customers[1][2].

Check out what SK Telecom's top brass has to say about the incident

Apologies and Public Response

Following the breach, SK Telecom issued a public apology, taking full responsibility for the incident and committing to protecting its customers' data[3][4]. While specific statements from Chey Tae-won, the chairman of SK Group, are not detailed in the reports, the CEO of SK Telecom has likely echoed this sentiments. In similar situations, corporate leaders typically express regret and a commitment to customer safety[3][4].

Curious about the financial and market impact? Keep going to find out more

Financial and Market Impact

As a result of the announcement, SK Telecom's stock experienced a decline[5].

Sources:

  1. JoongAng Ilbo
  2. Korea Herald
  3. Yonhap News Agency
  4. The Korea Times
  5. Reuters

Learn more about the inner workings of the HSS and other fascinating aspects of the telecommunications world by checking out our enrichment data:

  • How does the Home Subscriber Server (HSS) function? The HSS is a crucial component in telecommunications networks. It manages subscriber data and facilitates crucial functions such as authentication, authorization, and network service management.
  • What is SIM swapping, and how can it put users at risk? SIM swapping is a method used by cybercriminals to gain unauthorized access to a user's phone number and associated accounts. This can result in identity theft, financial fraud, and other security risks.
  • The hacker's attack on SK Telecom's internal network has raised concerns about the company's cybersecurity measures in the technology industry.
  • Businesses in the tech sector are now scrutinizing their own cybersecurity strategies, given the potential risks posed by hackers.
  • In light of this incident, info-tech publications like ilbo have dedicated detailed descriptions to the susceptibility of Home Subscriber Servers (HSS) to targeted attacks.
  • To prevent further incidents and protect consumer data, there have been calls for stricter regulations and enhancements in audio_0 (cybersecurity measures).
Digital certificate belonging to CJ OliveNetworks, the IT division of South Korea's CJ Group, was published and exploited in a cyberassault linked to North Korea, as per statements by cybersecurity authorities on Wednesday.

Read also:

    Latest