South Korea’s Personal Information Protection Commission fined KT Corp. 53.9 billion won ($37.4 million) after finding weak network access controls in its femtocell system led to the exposure of personal data for 16,647 mobile customers. The intrusion went undetected for nearly 11 months and came to light only after a customer complaint. Investigators also found 38 servers infected with malware including BPFDoor, and logs were deleted from 10 compromised servers.