{"id":"tving-subscriber-data-breach-jun-2026","category":"breach","status":"closed","title":"Tving breach exposes subscriber information from 39.54 million accounts","tldr":"South Korean streaming service Tving lost information from 39.54 million accounts, including former users. Check your breach notice, change reused passwords and verify unexpected compensation messages through Tving directly.","summary":"Tving, CJ ENM's South Korean streaming service, disclosed unauthorised access on 3 June. A government investigation subsequently counted 39.54 million compromised accounts, including active, dormant, closed and test accounts. This includes multiple accounts per person; Tving separately estimated about 19.53 million affected people. Exposed information varied by account and included names, dates of birth, phone numbers, email addresses, identity-linking identifiers and password hashes. Some contact details were encrypted, but the encryption keys were also stolen. Investigators confirmed use of a stolen developer access key but could not establish how it was obtained. In September, they reported no detected subsequent attacks or confirmed secondary harm. Tving strengthened security and offered compensation benefits. Additional applications were scheduled to close on 30 October, with distribution starting on 4 November. No final privacy-regulator penalty or arrest was identified in the sources reviewed through 3 November. There is no customer software patch for this breach.","action":"Open Tving's app or website directly and check your breach notification, including if you previously closed your account. Change your Tving password and any other account using the same password. Verify compensation messages through Tving directly, and do not give callers verification codes or money.","product":"Tving streaming service","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["tving","cj-enm","south-korea","streaming","data-breach"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Tving joint investigation findings: government briefing","url":"https://m.korea.kr/briefing/policyBriefingView.do?newsId=156780195","by":"Ministry of Science and ICT","date":"2026-09-04"},{"kind":"news","title":"Personal info of Tving users leaked","url":"https://en.yna.co.kr/view/AEN20260603006700315","by":"Yonhap News Agency","date":"2026-06-03"},{"kind":"news","title":"Nearly 40 mln Tving accounts compromised in massive data breach: probe","url":"https://en.yna.co.kr/view/AEN20260903006100320","by":"Yonhap News Agency","date":"2026-09-03"},{"kind":"news","title":"Tving awaits privacy regulator's determination of breach scope","url":"https://dealsite.co.kr/articles/170172","by":"DealSite","date":"2026-10-06"},{"kind":"news","title":"Tving compensation scheme questioned after 39.54 million accounts exposed","url":"https://www.lawissue.co.kr/view.php?ud=2026101417103019979817d053b9_12","by":"Lawissue","date":"2026-10-14"}],"started":"2026-06-03","closed":"2026-10-13","created":"2026-11-03T20:55:48.381Z","updated":"2026-11-03T20:55:48.381Z","cve_notes":[],"timeline":[{"at":"2026-10-13","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"At a parliamentary hearing, MP Kim Hyun-jung questioned the compensation scheme's effectiveness. Figures she released showed 2,752,030 first-round applicants, or 14.1% of the estimated 19.53 million affected people.","url":"https://www.lawissue.co.kr/view.php?ud=2026101417103019979817d053b9_12","by":"Lawissue","patch":null},{"at":"2026-10-06","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Tving reopened compensation applications until 30 October. Insurance and points for additional applicants were scheduled to be provided progressively from 4 November; the privacy regulator's investigation remained underway.","url":"https://dealsite.co.kr/articles/170172","by":"DealSite","patch":null},{"at":"2026-09-03","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"The government investigation confirmed 39.54 million compromised accounts and 361 stolen development projects. The account total includes multiple accounts belonging to the same people; investigators reported no detected additional attacks.","url":"https://en.yna.co.kr/view/AEN20260903006100320","by":"Yonhap News Agency","patch":null},{"at":"2026-06-03","added":"2026-11-03T20:51:54.186Z","kind":"disclosed","text":"Tving publicly acknowledged unauthorised access exposing subscriber information. Chief executive Choi Ju-hee apologised and said affected people were being notified.","url":"https://en.yna.co.kr/view/AEN20260603006700315","by":"Yonhap News Agency","patch":null},{"at":"2026-06-01","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Tving reported the incident to the Korea Internet & Security Agency. The government later found that the report exceeded the 24-hour reporting deadline.","url":"https://m.korea.kr/briefing/policyBriefingView.do?newsId=156780195","by":"Ministry of Science and ICT","patch":null},{"at":"2026-05-30","added":"2026-11-03T20:51:54.186Z","kind":"other","text":"Tving detected unusual database-server load. Investigators later established that an attacker had accessed internal systems and obtained user information.","url":"https://m.korea.kr/briefing/policyBriefingView.do?newsId=156780195","by":"Ministry of Science and ICT","patch":"na"}],"url":"https://hard.fyi/live/tving-subscriber-data-breach-jun-2026/","json":"https://hard.fyi/api/live?id=tving-subscriber-data-breach-jun-2026"}