[fn Editorial] Leaving Security Apathy Unchecked Could Lead to National Disaster

Digital technology is like a double-edged sword. Recently, due to a series of hacking incidents, the dark shadow of digital technology is becoming a reality. The leakage of customer USIM information from SK Telecom and unauthorized small payments by KT have caused significant mental and material damage to consumers. Moreover, the hacking chaos, including the hacking of Lotte Card's member information, is relentlessly hitting our society. The vulnerability of our society's security has been exposed.

The top priority is to identify the weaknesses in our country's security. Experts point out that compartmentalized responses to security have invited trouble. Hacking attacks the world simultaneously without distinguishing between countries and industries. Not only the hacking methods but also locating the criminals and post-measures are very complex. However, our country's hacking response system remains stuck in past administrative convenience. For example, financial sector hacking responses are handled by the Financial Services Commission, while the non-financial sector is managed separately by the Ministry of Science and ICT. In a world where cyberattacks are becoming more sophisticated and intelligent, can active responses be possible if management is divided among departments? Now is not the time to dismiss hacking as just another major crime. Hacking not only causes serious damage to individual property but also significantly undermines corporate value and causes shareholder damage. Furthermore, it threatens national security, requiring special measures against hacking. It is time to seriously consider establishing an integrated cybersecurity system at the pan-government level.

The standards for punishing lax security management by companies also need to be thoroughly reviewed. In corporate management, security issues are considered low priority. Entering new businesses and generating profits through production and sales are prioritized, with security often considered secondary. As a result, security budgets are inadequately allocated, and even after information leakage incidents occur, the handling and recovery process remains amateurish. The Lotte Card incident exemplifies this corporate issue, drawing public criticism. This is because it was later revealed that the scale of personal information leakage was understated and the types of leaked information included sensitive data.

The practice of reporting incidents late after they occur has angered the public. When a corporate hacking incident occurs, it must be reported within 24 hours. However, companies that recently experienced hacking incidents reported them well past the 24-hour mark. They are exploiting the fact that even if they violate the reporting obligation, they receive only a slap on the wrist. There is criticism that the fines for personal information leakage are too weak. There is a concern that the current legal system is too lenient on corporate profit-making. This is why the current lax security state persists, and security vulnerabilities have worsened.

As we enter the digital transition period, security issues will become important infrastructure not only for industrial development but also for digital well-being. Secure security must be ensured for the development of the digital industry to be possible. However, the security awareness and system of our country, which aims to be one of the top three AI nations, remain in the past. Security is no longer a choice but an obligation. As digital transformation accelerates, cyber threats also increase. We must not make the mistake of leaving the current security apathy unchecked, leading to a disaster that paralyzes the national system.