[Breaking] TVING Leaks 39.54 Million User Accounts... Developer’s Access Key Compromised

[Financial News] The TVING security breach exposed personal information from approximately 39.54 million user accounts, along with 361 development projects containing source code. Investigators found that the attacker stole a developer’s access key, infiltrated TVING’s internal systems, and extracted the information.
The Ministry of Science and ICT announced the findings of its investigation into the TVING security breach on the 3rd. The leaked accounts included 22.06 million active accounts that could still be used to log in, 17.37 million inactive accounts in dormant or withdrawn status, and 110,000 test accounts, for a total of 39.54 million accounts.
The figure includes many duplicate accounts, including duplicates involving connecting information (CI). Investigators also confirmed a case in which one person held as many as 13 accounts.
The investigation found that the attacker stole a developer’s access key, infiltrated TVING’s internal systems, and extracted information.
TVING became aware of the breach at 10:10 a.m. on May 31 but reported it at 3:08 p.m. on June 1, more than 24 hours later. As a result, the company will face an administrative fine for delayed reporting under the Act on Promotion of Information and Communications Network Utilization and Information Protection.
The specific scale of the personal-information leak will be announced after the Personal Information Protection Commission (PIPC) completes a detailed analysis of the leaked data categories.
[email protected] Choi Hye-rim Reporter