Image to help understand the article
Users question compensation and re-enrollment rules
Tving, a major South Korean streaming platform, is facing criticism over its response to a large-scale personal data breach. The company has proposed a compensation package valued at about 200 billion won, with benefits worth roughly 20,000 won per affected user.
Victims gathered in group chats have complained about both the value and structure of the offer. Some are rejecting the company’s package and seeking damages instead.
Former subscribers face an additional concern: People who deleted their Tving accounts after the breach must sign up again to claim compensation. Tving says re-enrollment is necessary to compare applicants’ information with the leaked records. Critics say the process requires them to submit personal details to the same company they left because their information was exposed.
Korean accounts advertised on Chinese shopping sites
Listings on Chinese online marketplaces have also offered accounts for Tving and several other South Korean services, including online retailers 29CM, Olive Young and Musinsa; gaming company Nexon; ticketing platform Interpark; health care app Gangnam Unni; and bookseller Yes24.
The sellers described the products as fully prepared Korean accounts. One Tving account seller said at least 200 accounts were available and promised replacements if buyers encountered login problems. Such accounts require personal information registered to a Korean identity for real-name verification, but the source of the accounts being sold was unclear.
Lawmakers and regulators examine Tving’s response
Tving CEO Choi Ju-hee has been named as a witness for a National Assembly audit, where lawmakers are expected to examine how the breach occurred, the company’s privacy safeguards and its response afterward. South Korea’s Personal Information Protection Commission could impose additional penalties depending on the outcome of its investigation.
Assigning responsibility could become more difficult if the leaked information is later used for phishing, account theft or other crimes. Stolen data can be redistributed through multiple channels and combined with information obtained from other breaches, complicating efforts to establish where specific harm originated.
Comments
Post a Comment