Tving, an online video service (OTT), said on the 3rd it confirmed indications of a personal data leak.
Tving apologized via its website and text messages, saying, "On the 2nd, we confirmed indications that an unidentified hacker made unauthorized access to the personal information storage databases (DB) and exfiltrated files."
The leaked personal information includes user IDs, names, dates of birth, and gender. For mobile phone numbers, the last four digits are said to be encrypted. Tving said refund account numbers and passwords are all encrypted.
Tving said, "As soon as we recognized the incident, we blocked the attacking IP and changed cloud access controls," adding, "We also strengthened DB access monitoring and completed security measures to prevent further damage."
Tving recommended that users change passwords for other services that use the same account information as Tving. It also urged users to watch out for phishing crimes such as suspicious calls or text messages.
Tving said it plans to provide separate guidance on compensation and procedures for relief related to this incident.