Tving, whose 39.54 million accounts were compromised, offers 'points' compensation [Official]

*This content was translated by AI.

OTT platform Tving, whose account information was leaked due to hacking, has announced a compensation plan.

Tving (CEO Choi Ju-hee) held an explanatory session on the 3rd at the Korea Hotel in Gwanghwamun, Seoul, regarding the large-scale personal data breach, issuing a formal apology and unveiling its information security investment plan and customer compensation package.

CEO Choi Ju-hui (CEO) stated, "We humbly accept the findings of the joint government-industry investigation team and sincerely apologize to our customers for the concern and anxiety caused by this security incident." He continued, "Since the incident, we have diligently cooperated with investigations, implemented emergency security measures, and worked hard to protect our customers. We will responsibly implement countermeasures to prevent recurrence and restore customer trust," bowing his head in apology.

During today's session, measures based on investigation results were announced, along with a mid-to-long-term information security innovation plan developed through objective verification and input from external experts, as well as the customer compensation plan.

Tving will completely rebuild its security system based on four core strategies: (1) expanding investment in information protection and security personnel; (2) reconstructing a zero-trust-based security framework; (3) redefining organizational governance and security culture; and (4) strengthening expertise through external collaboration.

First, Tving will significantly expand its investment in information protection and professional personnel. By 2030, it plans to increase information protection investment to approximately four times the level of the previous five years to strengthen its own security capabilities. The security organization will be subdivided into product security, cloud security, corporate IT security, and compliance security systems, while professional staff will be tripled over the next five years.

The basic principles of security will also be fully upgraded to Zero-Trust. First, authentication and access control methods will be standardized into a unified enterprise-wide security standard system that verifies each step sequentially. Authority will be granted only within necessary scopes based on job roles and purposes, centered on the principle of least privilege. Additionally, systems and network areas will be segmented and isolated assuming internal breaches, and protection levels for critical data such as personal information will be further strengthened to refine the overall security structure. Finally, AI-based intelligent detection and real-time automated response systems will be enhanced so that threats are immediately blocked and isolated upon detection.

Furthermore, efforts will be made to reform the security governance system and redefine the corporate security culture. Under the CEO-CISO-CPO framework, a new practical security committee will be established to solidify a swift and consistent response mechanism, establishing a virtuous cycle from identifying security issues through decision-making, execution, and review. Regular job-specific security training and realistic simulation drills will also be institutionalized to cultivate a culture where all employees become active participants in security.

Lastly, an objective verification system through external security experts will be established. A 'Information Security Innovation Advisory Committee' directly under the CEO will be launched to strengthen multi-faceted verification and advisory functions across policies and systems, continuously improving the maturity of security policies and technical frameworks.

To restore customer trust and prevent further damage, Tving will offer a compensation package consisting of: (1) hacking and phishing insurance; (2) premium viewing environment upgrade; (3) Tving points; and (4) entertainment coupons.

The insurance coverage lasts for one year and compensates up to 3 million won per person for cyber financial fraud arising from hacking or phishing, as well as online shopping mall scams and direct peer-to-peer transaction fraud. Additionally, users will be automatically upgraded to a premium viewing environment without requiring separate applications.

Furthermore, Tving will provide 5,000 won worth of Tving points usable for individual purchases of the latest movies and other content. Customers can also choose one entertainment coupon offering either one month of Wave AVOD (worth 5,500 won) or a 5,000 won discount coupon for three types of CGV combo meals.

Applications for the compensation package will be accepted from the 7th to the 30th of this month, with benefits taking effect starting October 6. Detailed information and application methods can be confirmed via Tving's official app and website announcements.

CEO Choi Ju-hui (CEO) stated, "We deeply reflect on this incident and will fundamentally rebuild our entire security system from the ground up. We regard information protection as the most critical responsibility and competitive advantage of our platform and will do our utmost to restore customer trust."

According to the joint government-industry investigation team under the Ministry of Science and ICT, a total of 39.54 million accounts were leaked in the Tving hacking incident, including active, dormant, and deleted accounts. Consequently, the scale of damage far exceeds Tving's 5 million paid subscribers. The leaked information includes 20 categories across 70 types: user IDs, passwords, names, resident registration numbers, and more. With encryption keys also compromised, even previously encrypted resident registration numbers and email addresses fell into hackers' hands.

<© STARNEWS. All rights reserved. No reproduction or redistribution allowed.>

*This content was translated by AI.