SK Telecom

SK Telecom's termination-fee waiver turns an April 2025 USIM breach into a measurable trust, churn and regulatory-control event. The public record is not just that SK Telecom had a cyber incident; it is that South Korea's Ministry of Science and ICT found negligence and a breach of the duty to provide secure service, while SK Telecom answered with a cancellation-fee waiver, a KRW 500 billion customer package and a KRW 700 billion security plan. The watchpoint is whether fee liability and user switching become a repeatable enforcement mechanism for Korean telecom breaches.

SK Telecom's July 2025 fee-waiver announcement should be read as a breach-fallout event, not as a generic customer-care update. SK Telecom said customers who were subscribed before midnight on April 18 and canceled after the cybersecurity incident, or intended to cancel by July 14, would have telecommunication-service cancellation fees waived. That moved the incident from security remediation into customer churn and contract-liability territory.

The regulatory mechanism is clear. MSIT's final investigation said the public-private team scanned 42,605 SK Telecom servers, identified 28 infected servers and confirmed leakage of 25 categories of USIM data totaling 9.82 GB, or roughly 26.96 million IMSI records. MSIT found poor credential management, weak response to an earlier 2022 incident and failure to encrypt critical data. It then concluded that the waiver clause in SK Telecom's terms could be invoked because the incident was attributable to the company.

SK Telecom paired the waiver with broader trust-repair spending. Its official Accountability and Commitment Program included a KRW 500 billion customer package for SK Telecom and MVNO users, a 50 percent August bill discount for eligible customers, extra monthly data through the end of 2025, returnee benefits and a KRW 700 billion five-year information-protection investment plan. Those figures are the financial expression of a trust-control failure: customer retention now depends on security governance as much as network coverage or price.

The market impact was visible before and after the waiver. Light Reading reported CEO testimony that 250,000 subscribers had already switched and that severe churn scenarios could combine lost revenue and waived fees into a multi-trillion-won exposure. Korea JoongAng Daily later reported that SK Telecom's third-quarter operating profit fell 90.9 percent year over year, with compensation measures and higher churn from the July waiver weighing on results. That is the practical signal: breach response can become a balance-sheet event for a national mobile carrier.