McDonald’s Korea fined for leak of customers’ personal data

South Korea’s Personal Information Protection Commission slapped McDonald’s Korea with a $532,110 fine along with a 10 million won financial penalty due to the firm’s lax data management that led to the leaking of 4.87 million customers’ data to hackers.

According to the commission’s findings, McDonald’s Korea left a backup file containing the personal data of its restaurant and McDelivery customers accessible via protocols for file sharing.

Consequently, the personal data of over 4.87 million customers was hacked and leaked.

The Korean branch of the American fast food chain was also found to have failed to destroy the personal data of 766,846 customers for whom the data retention period had expired, and belatedly notified authorities and customers of the data leakage.