2026 Tving — confirmed third-party leak; CEO apology; ~15M+ cited in trade press (June 3)

On June 3, 2026, Korean streaming platform Tving confirmed that an unauthorized external party leaked member personal information—including names, dates of birth, sex, phone numbers, usernames, and email addresses—while stating resident registration numbers and payment data were not stored and therefore unaffected. The Korea JoongAng Daily reported the company apologized, strengthened monitoring, and advised password changes for reused credentials; South Korea’s Ministry of Science and ICT opened an investigation the same day. Criminal-forum and security-social channels cited roughly 15 million or more affected accounts and viewing-history exposure; Tving had not published an official victim total at catalog time, so BreachHistory uses the trade-press ceiling with ongoing verification.