The testing programme covered all Lotte Duty Free services accessible via external internet networks.

Lotte Duty Free has reinforced its information security capabilities by conducting an extensive ‘black box’ penetration test in collaboration with cyber security specialist Stealien.

The initiative, which ran for approximately one month, was designed to assess the company’s security systems from the perspective of an external attacker.

Unlike conventional penetration testing, black box testing is carried out without prior knowledge of system architecture or vulnerabilities and without predefined scenarios, closely simulating real-world hacking attempts.

The objective of the exercise was to help Lotte Duty Free to proactively identify and eliminate potential security threats, prevent future incidents and further strengthen customer trust across its digital platforms.

Lotte prioritises security capabilities

The testing programme was conducted by Stealien’s team of certified ‘white hat’ hackers between 29 December 2025 and January, and covered all Lotte Duty Free services accessible via external internet networks.

Vulnerabilities identified during the process are being reviewed jointly by both companies, with corrective measures implemented to strengthen overall system resilience.

“This black box penetration test provided a valuable opportunity to proactively assess and reinforce company-wide security vulnerabilities,” commented Lotte Duty Free Head of Information Security Lim Jung-woo. “We will continue to enhance our security capabilities to ensure we provide customers with safe and reliable services.

Lotte Duty Free has been stepping up its security efforts across the organisation, including the formation of a dedicated information security taskforce and the operation of a quarterly information security working committee.

The company also conducts regular security assessments of its Amazon Web Services infrastructure and provides vulnerability response training for developers and system operators.

In recognition of its efforts, Hotel Lotte – comprising Lotte Duty Free, Lotte Hotels & Resorts and Lotte World Adventure – received a Ministerial Commendation for contributions to the development of the information security industry at the ‘Security Festa 2025’, hosted by Korea’s Ministry of Science and ICT in December last year.

READ NEXT: Lotte DF and Hyundai DF bidding for DF1 and DF2 zones at ICN

READ NEXT: Lotte Duty Free unveils revamped Star Avenue at Myeongdong flagship

READ NEXT: Lotte Duty Free partners with K-pop artists KickFlip and Hearts2Hearts