A joint investigation showed that nearly 40 million user accounts of the South Korean streaming platform Tving were compromised in a massive data breach stemming from a hacking incident reported in June. ^[1] The streaming service Tving confirmed that a total of 39.54 million user accounts had their personal information leaked. ^[2] Investigators found that an unidentified hacker stole a developer's access key and used it to infiltrate Tving's internal systems. ^[3] The investigation also found that Tving failed to report the breach to the Korea Internet & Security Agency within 24 hours of detecting the incident on May 30, reporting it only on June 1 and potentially facing a fine for the delay. ^[4] The Ministry of Science and ICT announced the results of a three-month government-civilian investigation into the breach at Tving, an online video streaming platform operated by entertainment giant CJ ENM Co. ^[5] The data breach involved the exposure of personal information belonging to a massive number of Tving subscribers. ^[6] The incident represents a significant security failure for the South Korean digital entertainment platform. ^[7]