LG Uplus AI call app Iksio exposes user call data via cache error
During server maintenance on LG Uplus's AI call app Iksio, a cache setting error temporarily exposed the call information of 36 customers to 101 other app users. The company discovered the incident after a user report, fixed the problem within 30 minutes, and self-reported to South Korea's Personal Information Protection Commission.
What happened
During server maintenance and functionality improvements to the AI call app Iksio on 2β3 December 2025, a cache setting error caused call information from 36 customers to be temporarily exposed to 101 other users who were installing or reinstalling the app. Each affected customer had their data exposed to 1β6 other users.
The exposed information included phone numbers of call recipients, call times, and summaries of call content. Personal identification numbers, passport numbers, and financial information were not exposed. The company discovered the incident after a user reported via customer feedback (VOC) that they were seeing other people's call information.
Reported impact
LG Uplus stated the exposure was temporary and unrelated to hacking. The company took corrective measures within 30 minutes of learning of the problem, preventing further exposure.
Index analysis
LG Uplus self-reported the incident to South Korea's Personal Information Protection Commission on 6 December 2025, the same day it was discovered. The company notified all affected customers by phone and text message.
Governance controls
LG Uplus stated it complied with regulations requiring notification to authorities within 72 hours of becoming aware of a data breach. The company noted that the incident did not meet the threshold for mandatory reporting (more than 1,000 affected individuals or exposure of sensitive identifiers) but chose to report it voluntarily.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.