Government Launches Joint Investigation into Tving Data Leak... "Beware of Compensation Scam Messages"

Ministry of Science and ICT Classifies Incident as "Major Security Breach"
KISA and Private Sector Experts Join Investigation

Member IDs, Names, Contact Information Leaked
Warning Issued over Secondary Damage from Smishing and Malicious Apps

The Ministry of Science and ICT has classified the personal information leak incident involving the online video service (OTT) Tving as a major security breach and has formed a joint public-private investigation team to conduct a thorough investigation.

A personal information leak incident occurred on TVING. A popup notice titled 'Personal Information Leak Incident Notice' can be seen when accessing the website and app.

On June 3, the Ministry of Science and ICT announced that it had established a joint public-private investigation team on June 3 to investigate the current status of the damage caused by the Tving member information leak incident, as well as the cause of the breach, and has commenced its investigation.

Tving reported the breach on June 1. Immediately after the report, the Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) requested Tving to preserve related materials and launched an investigation into the cause of the incident and the extent of the damage.

The Ministry of Science and ICT held an emergency review committee meeting on the same day and concluded that this incident constitutes a major breach, necessitating the formation of a joint public-private investigation team. This decision was made after comprehensively considering the large-scale information leak and the potential for further damage.

The joint investigation team will be led by the Director-General for Information Security and Network Policy at the Ministry of Science and ICT. In addition to officials from the Ministry of Science and ICT and KISA, private sector experts in digital forensics and cloud services will also participate. The Ministry stated that it plans to conduct a thorough investigation and transparently disclose the results to the public.

Recently, Tving issued an official notice confirming that unauthorized external access led to the leakage of member personal information. The leaked information includes member IDs, names, dates of birth, gender, phone numbers, and email addresses.

Resident registration numbers and valid payment-related information were not included in the leak, as Tving does not store such data. It is currently being investigated whether the leak affected all members or only a portion of them, and the exact scale of the damage is still being determined.

The Ministry of Science and ICT also cautioned about the possibility of secondary damage, such as smishing, which could exploit the leaked information. The Ministry warned that voice phishing attempts or malicious app installations may occur under the pretense of compensation, damage notification, or refunds.

Accordingly, the Ministry of Science and ICT posted a nationwide security notice on the Boho Nara website. Users were advised not to click on internet links in text messages from unclear sources and not to comply with requests to install apps that claim to offer compensation or refunds.

Tving also recommended that users change the passwords of other services where they use the same ID and password. Procedures for damage relief and additional information will be announced at a later date.

This content was produced with the assistance of AI translation services.