{
  "story_id": "f4180ffb1ff3065bd6ff54674d321423",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-03T09:41:00.000Z",
  "content_hash": "ef2668ab478171b27dd46931a298604e6023b25973e985fd8fed43966503e128",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "Tiving CEO Apologizes for Leaking 39.54 Million Accounts; 2024 Vulnerability Left Unfixed",
    "dek": "Tiving CEO Choi Joo-hee apologized for a hack leaking 39.54 million accounts and 361 assets; a 2024 vulnerability remained unfixed.",
    "prose": "Choi Joo-hee, CEO of South Korean streaming service Tiving (TVING), publicly apologized at a press conference on 2026-07-03 for a cyberattack that leaked 39.54 million user accounts and 361 technical assets including source code. [^1]\n\nSouth Korea's Ministry of Science and ICT joint public-private investigation team said on 2026-07-03 that Tiving leaked personal information from 39.54 million accounts, including 22.06 million active, 17.37 million dormant or deleted, and 0.11 million test accounts. [^2]\n\nThe ministry investigation found on 2026-07-03 that an unidentified attacker stole a developer access key on 2026-05-29, used it to break into Tiving's development environment, and exfiltrated 361 development projects containing source code, totaling about 30.35 GB. [^3]\n\nData submitted by Democratic Party lawmaker Lee Jung-heon from the Personal Information Protection Commission and the Ministry of Science and ICT puts the number of victims tallied so far at about 19.53 million. [^4]\n\nTVING, a South Korean OTT streaming service, will hold an official apology and explanation session on the 3rd at a hotel in Jung-gu, Seoul, with CEO Choi Joo-hee and other executives attending, about three months after its personal information leak became known in June 2025. [^5]\n\nThe same ministry investigation reported on 2026-07-03 that the leaked data involved 20 fields and 70 types of information, including names, birth dates, mobile phone numbers, email addresses, and CI (linked connection information). [^6]\n\nAt the session, TVING will present an official apology, information security strengthening plans, customer compensation measures, and hold a question-and-answer session. [^7]\n\nTVING announced in June 2025 that an unidentified hacker accessed the database storing user personal information and leaked personal information files. [^8]",
    "cited": "[{\"statement\":\"Choi Joo-hee, CEO of South Korean streaming service Tiving (TVING), publicly apologized at a press conference on 2026-07-03 for a cyberattack that leaked 39.54 million user accounts and 361 technical assets including source code.\",\"source\":\"동아일보\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T09:41:00.000Z\",\"publisher_count\":1,\"sources\":[\"동아일보\"]},{\"statement\":\"South Korea's Ministry of Science and ICT joint public-private investigation team said on 2026-07-03 that Tiving leaked personal information from 39.54 million accounts, including 22.06 million active, 17.37 million dormant or deleted, and 0.11 million test accounts.\",\"source\":\"동아일보\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T09:41:00.000Z\",\"publisher_count\":1,\"sources\":[\"동아일보\"]},{\"statement\":\"The ministry investigation found on 2026-07-03 that an unidentified attacker stole a developer access key on 2026-05-29, used it to break into Tiving's development environment, and exfiltrated 361 development projects containing source code, totaling about 30.35 GB.\",\"source\":\"동아일보\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T09:41:00.000Z\",\"publisher_count\":1,\"sources\":[\"동아일보\"]},{\"statement\":\"Data submitted by Democratic Party lawmaker Lee Jung-heon from the Personal Information Protection Commission and the Ministry of Science and ICT puts the number of victims tallied so far at about 19.53 million.\",\"source\":\"매일경제\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T05:26:48.000Z\",\"publisher_count\":1,\"sources\":[\"매일경제\"]},{\"statement\":\"TVING, a South Korean OTT streaming service, will hold an official apology and explanation session on the 3rd at a hotel in Jung-gu, Seoul, with CEO Choi Joo-hee and other executives attending, about three months after its personal information leak became known in June 2025.\",\"source\":\"매일경제\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T05:26:48.000Z\",\"publisher_count\":1,\"sources\":[\"매일경제\"]},{\"statement\":\"The same ministry investigation reported on 2026-07-03 that the leaked data involved 20 fields and 70 types of information, including names, birth dates, mobile phone numbers, email addresses, and CI (linked connection information).\",\"source\":\"동아일보\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-03T09:41:00.000Z\",\"publisher_count\":1,\"sources\":[\"동아일보\"]},{\"statement\":\"At the session, TVING will present an official apology, information security strengthening plans, customer compensation measures, and hold a question-and-answer session.\",\"source\":\"매일경제\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T05:26:48.000Z\",\"publisher_count\":1,\"sources\":[\"매일경제\"]},{\"statement\":\"TVING announced in June 2025 that an unidentified hacker accessed the database storing user personal information and leaked personal information files.\",\"source\":\"매일경제\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T05:26:48.000Z\",\"publisher_count\":1,\"sources\":[\"매일경제\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "d359815430ae294124a476874b10b78d",
      "thread_id": "f43332870fa6c67347b9cb8e6eeb0cec",
      "thread_label": "Choi Joo-hee",
      "novelty": "UPDATE",
      "content_hash": "aed381d346d18faefa602f9cda1d75f26900f23b1c1d4803d8ca13cece034099",
      "last_published_at": "2026-09-03T09:41:00.000Z",
      "read_receipt": {
        "slice_hash": "5b250589903e1b31cdecedc9413aa9a6a603fb2884a38edfdd926b0b45bdb9c8",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDNUMDk6Mzk6MDEuMDAwMDAwWiIsImlkIjoiNWE0OGY2Mzk1Njg3NDAyYzM5MzU5ZjNiYzI5YmQ1MDgiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDNUMTA6NDc6NTkuMDAwMDAwWiIsImlkIjoiNDQxNWY3MmVjNjI3YWFmZmYyOWNkMjU2NGE5MWIxMDAiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 11903793,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "FGyuKx6cHLV-VD5cp5vodCakHTmRrwjWQMBc_4cSrskEUXEJ-Ad0SnbFQdTiKOoFOiwRQUhg9R8D2w0vR4wHBw",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-03T12:20:53.280Z"
  },
  "cited_facts": [
    {
      "statement": "Choi Joo-hee, CEO of South Korean streaming service Tiving (TVING), publicly apologized at a press conference on 2026-07-03 for a cyberattack that leaked 39.54 million user accounts and 361 technical assets including source code.",
      "source": "동아일보",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T09:41:00.000Z",
      "publisher_count": 1,
      "sources": [
        "동아일보"
      ]
    },
    {
      "statement": "South Korea's Ministry of Science and ICT joint public-private investigation team said on 2026-07-03 that Tiving leaked personal information from 39.54 million accounts, including 22.06 million active, 17.37 million dormant or deleted, and 0.11 million test accounts.",
      "source": "동아일보",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T09:41:00.000Z",
      "publisher_count": 1,
      "sources": [
        "동아일보"
      ]
    },
    {
      "statement": "The ministry investigation found on 2026-07-03 that an unidentified attacker stole a developer access key on 2026-05-29, used it to break into Tiving's development environment, and exfiltrated 361 development projects containing source code, totaling about 30.35 GB.",
      "source": "동아일보",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T09:41:00.000Z",
      "publisher_count": 1,
      "sources": [
        "동아일보"
      ]
    },
    {
      "statement": "Data submitted by Democratic Party lawmaker Lee Jung-heon from the Personal Information Protection Commission and the Ministry of Science and ICT puts the number of victims tallied so far at about 19.53 million.",
      "source": "매일경제",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T05:26:48.000Z",
      "publisher_count": 1,
      "sources": [
        "매일경제"
      ]
    },
    {
      "statement": "TVING, a South Korean OTT streaming service, will hold an official apology and explanation session on the 3rd at a hotel in Jung-gu, Seoul, with CEO Choi Joo-hee and other executives attending, about three months after its personal information leak became known in June 2025.",
      "source": "매일경제",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T05:26:48.000Z",
      "publisher_count": 1,
      "sources": [
        "매일경제"
      ]
    },
    {
      "statement": "The same ministry investigation reported on 2026-07-03 that the leaked data involved 20 fields and 70 types of information, including names, birth dates, mobile phone numbers, email addresses, and CI (linked connection information).",
      "source": "동아일보",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-03T09:41:00.000Z",
      "publisher_count": 1,
      "sources": [
        "동아일보"
      ]
    },
    {
      "statement": "At the session, TVING will present an official apology, information security strengthening plans, customer compensation measures, and hold a question-and-answer session.",
      "source": "매일경제",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T05:26:48.000Z",
      "publisher_count": 1,
      "sources": [
        "매일경제"
      ]
    },
    {
      "statement": "TVING announced in June 2025 that an unidentified hacker accessed the database storing user personal information and leaked personal information files.",
      "source": "매일경제",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T05:26:48.000Z",
      "publisher_count": 1,
      "sources": [
        "매일경제"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}