In December 2021, Moncler Korea suffered a cyberattack where hackers compromised an administrator account and installed malware on the company’s servers, leading to a large-scale data breach. The incident exposed the purchase-related personal details of approximately 230,000 South Korean customers, though sensitive data such as names, dates of birth, emails, and card numbers were reportedly not leaked. The breach went undetected for a month before Moncler Korea identified it, and the company further delayed notifying both affected customers and the Personal Information Protection Commission (PIPC). As a result, South Korea’s regulatory authority imposed an 88 million won ($63,200) fine on the company for failing to secure customer data and for the delayed response. The attack highlights vulnerabilities in administrative access controls and incident response protocols, emphasizing the risks of malware-based intrusions and the importance of timely breach disclosure under data protection laws.