started · updated
Weverse and Tving hit by major data breaches
South Korean entertainment platforms Weverse and Tving have reported significant cybersecurity incidents. Weverse Company, a subsidiary of HYBE, confirmed that 422,584 user accounts were affected by a data leak. The exposed information includes internal identification numbers and various payment-related details, such as purchase types, amounts, dates, and payment gateway names. Weverse stated that the leaked internal identifiers cannot be used externally to directly identify customers.
Tving experienced a much larger breach, with approximately 39.5 million accounts affected and source-code files exposed. The Tving incident involved multiple categories of personal and payment information. In response to these vulnerabilities, both companies have implemented security enhancements. Tving has also announced a compensation program for those affected by the breach.
Entities
HYBE · Korea Internet & Security Agency · Tving · Weverse Company · Yang Zooil