INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Lotte Itsu hit by Giftel hacking incident, takes measures

| 2026-10-30 07:44 HIGH LOW DATA BREACH
Executive Summary
AI-generated
A cyber attack on Giftel, a mobile coupon service operated by Lotte Group's affiliate, occurred after a data breach at Spies, a subsidiary of Dae Hong Marketing, a marketing agency affiliated with Lotte Group. The incident resulted in the disclosure of 18,359 people's personal information and has caused inconvenience to users of Lotte's affiliated brands, including Lotteia and Enersys. As a result, Giftel's coupon service was suspended from October 26th, affecting over 24 brands, with disruptions in review, use, approval, and cancellation of coupons. The affected customers were notified through text messages regarding the incident, while compensation measures have been taken for membership card coupon misuse by Lotte Itsu, which extended the validity period and restored mileage for its members.
Technical Mitigations AI-generated
• Review and update the system to prevent further damage from similar attacks. • Detect and block suspicious login attempts using techniques such as IP blocking or behavioral analysis. • Use a secure protocol for communication, such as HTTPS, to protect data in transit.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎October 26
SPN suspended its Gift Point mobile coupon service from 8:30 PM on October 26 to conduct security checks and prevent further damage.
‎October 28th
Lotte Eatz suspended its coupon service on October 28th following a security check.
‎2026/10/30
A cyber attack on Giftel, a mobile coupon service operated by Lotte Group's affiliate, has resulted in the disclosure of 18,359 people's personal information and disrupted its affiliated brands' services.
organisation Lotte
organisation Lotteia
organisation Enersys
organisation Spies
organisation Dae Hong Marketing
organisation Lotte Group
organisation Giftel
organisation Lotte Itsu
organisation Lotte Group's
organisation SPN
organisation the Personal Information Protection Commission
organisation the Korea Internet & Security Agency
organisation KISA
organisation Enjinerers
organisation Lotte-ITZ
‎November 4th
Spinnie aims to standardize its service on November 4th after completing necessary security measures and inspections.