TVING data breach exposes 40 million user accounts

Government investigators found that hackers accessed TVING’s internal systems by stealing a developer’s access key. The leaked information included names, birth dates, mobile phone numbers, email addresses, and other personal data across 20 categories and 70 types of records. Passwords were reportedly protected with one-way encryption, but encryption keys for phone numbers and email addresses were also taken, effectively exposing those fields in plaintext. The breach was detected on May 31, but it was reported to the Korea Internet & Security Agency more than 24 hours later, which could trigger a penalty.