INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

SK Telecom Customer Data Leaked on Dark Web Marketplaces

| 2026-10-06 10:26 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A recent dark web post has exposed 23 million SK Telecom customer information sales listings, including usage and billing information as of September 2026. The leak is believed to have originated from the same source that previously disclosed similar material last year, although it's unclear if this new data is an updated version or a separate release. The leaked database contains customer personal information, communication service usage details, and fee, mobile, and billing information for approximately 23 million SK Telecom customers. The post claims to have publicly disclosed the database structure and actual data format of the leaked data, which includes recent service-related information such as data usage and billing amounts as of September 2026.
Technical Mitigations AI-generated
• Patch the 'SKTCUST.TB_CUST_SVC_INFO' database structure to prevent unauthorized access and data exposure. • Monitor for suspicious activity related to the 'wulen' account, which posted the leaked SK Telecom customer information on the dark web forum. • Implement a timestamp verification process to detect potential AI-generated synthetic databases that may be masquerading as actual SK Telecom subscriber data.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope telecommunicationstelecommunications
Incident Timeline
‎2025/10/06
Threat actors posted 23 million SK Telecom customer information sales listings, including usage and billing details, on the dark web as of September 2026.
organisation SK Telecom
Last year, similar information related to SK Telecom appeared on the dark web.
organisation Daily Security
Daily Security reported last year that similar material related to SK Telecom customer information appeared on the dark web board.
‎September 2026
Threat actors publicly disclosed a database containing 23 million SK Telecom customer records, including usage and billing information as of September 2026.
organisation Usage and Billing Information
[Exclusive] Dark Web Exposes 23 Million SK Telecom Customer Information Sales Listings...Including Usage and Billing Information as of September 2026.
victims 23 SK Telecom Customer Sales Listings
[Exclusive] Dark Web Exposes 23 Million SK Telecom Customer Information Sales Listings...Including Usage and Billing Information as of September 2026.
organisation SK Telecom's
There is a possibility that SK Telecom's actual tariff plans and contract structures, device information, and billing systems were combined with publicly released personal data or existing leaked data using AI or a separate program, resulting in a synthetic database that closely resembles actual data.
organisation Customer Service Information
The data contains a '2026Nyeon 10Wol 3Il' timestamp indicating the file creation date, and the table is defined as 'Gogaek Seobiseu Jeongbo' (Customer Service Information).
organisation SIM
Additionally, the replacement date of the SIM card, the date of SIM card protection service subscription, the final login date of T-World, and the consent to marketing are also included.
organisation SQL
The author has publicly disclosed the database structure and the actual customer records in the form of a SQL input statement, with a sample based on one registered user, including the customer's name, birthdate, gender, and mobile phone number.
Tactical Metrics
Metrics
victims
23,000,000
Sk Telecom Customer Sales Listings
[Exclusive] Dark Web Exposes 23 Million SK Telecom Customer Information Sales Listings...Including Usage and Billing Information as of September 2026.
Intelligence Sources
Dailysecu 2026-10-06