Tving: Hackers breach Tving database, exposing user data

Tving Data Breach Exposes Personal Information of South Korean Streaming Users

South Korean streaming platform Tving confirmed a data breach on Wednesday, revealing that unauthorized access to user information had occurred. The compromised data may include user IDs, names, dates of birth, gender, mobile phone numbers, and email addresses. However, the company stated that resident registration numbers and payment details were not exposed.

The breach was traced to an unidentified hacker who accessed a database and transferred user data to an external location. Tving responded by blocking the attacker’s IP address and implementing enhanced security measures, including updates to cloud access control policies. A dedicated customer support center was also established to assist affected users.

While Tving did not disclose the number of impacted users, local app analytics firm Mobile Index reported that the platform had 7.7 million monthly active users as of April, ranking third among South Korea’s major streaming services. Netflix led with 14.7 million users, followed by Coupang Play (9.1 million), Wavve (3.8 million), and Disney+ (3.4 million). The incident highlights ongoing cybersecurity risks in the region’s digital entertainment sector.

Source: https://www.koreaherald.com/article/10762889

Tving TPRM report: https://www.rankiteo.com/company/tving

"id": "tvi1780468107",
"linkid": "tving",
"type": "Breach",
"date": "6/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Digital Entertainment',
                        'location': 'South Korea',
                        'name': 'Tving',
                        'type': 'Streaming Platform'}],
 'attack_vector': 'Unauthorized database access',
 'customer_advisories': 'Dedicated customer support center established',
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'User IDs, names, '
                                                        'dates of birth, '
                                                        'gender, mobile phone '
                                                        'numbers, email '
                                                        'addresses',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personal Information'},
 'date_publicly_disclosed': 'Wednesday',
 'description': 'South Korean streaming platform Tving confirmed a data breach '
                'revealing that unauthorized access to user information had '
                'occurred. The compromised data may include user IDs, names, '
                'dates of birth, gender, mobile phone numbers, and email '
                'addresses. However, resident registration numbers and payment '
                'details were not exposed. The breach was traced to an '
                'unidentified hacker who accessed a database and transferred '
                'user data to an external location.',
 'impact': {'data_compromised': 'User IDs, names, dates of birth, gender, '
                                'mobile phone numbers, email addresses',
            'identity_theft_risk': 'High',
            'payment_information_risk': 'None',
            'systems_affected': 'Database'},
 'references': [{'source': 'Mobile Index'}],
 'response': {'communication_strategy': 'Established a dedicated customer '
                                        'support center',
              'containment_measures': 'Blocked the attacker’s IP address',
              'remediation_measures': 'Enhanced security measures, updates to '
                                      'cloud access control policies'},
 'threat_actor': 'Unidentified hacker',
 'title': 'Tving Data Breach Exposes Personal Information of South Korean '
          'Streaming Users',
 'type': 'Data Breach'}