The Personal Information Protection Commission said it received a personal data breach report from the online video service (OTT) Tving at about 2 a.m. on the 3rd and launched an investigation.
According to the Personal Information Protection Commission on the 4th, Tving recognized on the 2nd that there had been unauthorized access to databases storing user personal information and then filed a data breach report.
The personal information presumed to have been leaked includes IDs, names, dates of birth, gender, connecting information (CI), duplicate subscription verification information (DI), mobile phone numbers, emails, refund account numbers, and passwords. Some items were confirmed to have been stored in encrypted form.
The Personal Information Protection Commission plans to verify the specific cause of the breach and the scale of the damage through requests for materials and on-site inspections. It will also examine compliance with safety measure obligations and breach notice/reporting obligations under the Personal Information Protection Act, and, if violations of the law are confirmed, it plans to take strict action in accordance with relevant statutes.