Allies need cooperation on data security, not double standards

The Korean government has recently released the outcomes of their investigation into a major data breach affecting Tving, a popular streaming platform. The investigation has revealed the theft of access keys and sensitive data belonging to 39.54 million users, as well as stolen source code and technical assets. Alarmingly, the attackers have transferred this information to foreign locations, leaving the identity of the perpetrators and their home country unknown.

The compromised data encompasses 70 different types of personal information across 20 categories, including phone numbers, email addresses, dates of birth, and payment histories. Tving failed to notify regulators within the required 24-hour window, and investigators have warned that the stolen data could be used to launch additional phishing attacks and data theft.

The South Korean government's response to the incident has been characterized as thorough, professional, and appropriate. Their actions have included a technical briefing, a comprehensive presentation of findings, an apology from the affected company, and the referral of the matter to the Personal Information Protection Commission (PIPC) to determine the appropriate penalties at a later date. However, as of now, no penalties have been imposed on the perpetrators.