Tracks the May 2026 intrusion into TVING, the large-scale leak of account information and technical assets, subsequent regulatory investigations, the government's findings, and TVING's security and customer-compensation response.
7 events · 4 sources · Updated 37 days ago
TVING reported the incident to KISA at 3:08 p.m. KST on June 1. The government investigation found that the report was made more than 24 hours after the company became aware of the incident, missing the statutory deadline.
South Korea's Personal Information Protection Commission launched an investigation into the breach involving TVING users' personal data.
Video report on the government's investigation findings into the TVING data breach
A joint investigation led by the Ministry of Science and ICT confirmed that data associated with 39.54 million accounts, including duplicates, and 361 technical assets containing source code had been leaked. The original attacker remained unidentified and a police investigation was ongoing.
TVING formally apologized for the breach and said it would increase information-security investment through 2030 to about four times the level of the previous five years. It also announced a customer compensation package including cyber-fraud insurance and TVING points.
TVING opened compensation applications for members affected by the data breach. Applications are available through September 30 via its website and app, including for dormant and former members, with benefits scheduled to begin on October 6.