South Korean streaming service TVING is sharply increasing cybersecurity spending after a breach exposed information tied to 39.5 million accounts, underscoring the growing costs and regulatory risks facing entertainment platforms as they compete for subscribers and rely on increasingly valuable consumer data.
The company plans to spend roughly four times as much on information security through 2030 as it did over the previous five years and expand its security workforce, while introducing stricter access controls and artificial-intelligence-based threat detection. For U.S. investors and technology companies watching South Korea’s fast-growing streaming market, the move highlights how cybersecurity is becoming a core operating and investment priority rather than a back-office expense.
TVING Chief Executive Choi Joo-hee apologized for the breach on September 3 and said the company would rebuild its security infrastructure from the ground up following the final findings of a joint government-industry investigation.
“I sincerely apologize for causing concern and anxiety among our customers,” Ms. Choi said. “As CEO, I feel a profound responsibility for failing to provide a safe service.”
TVING said it will increase its internal information-security staff to about 10 people by the end of this year and roughly triple its combined internal and external security specialists over the next five years.
The company also plans to adopt a zero-trust security architecture, requiring stronger authentication and tighter access controls. It will upgrade artificial-intelligence systems designed to detect abnormal activity and respond to threats in real time.
To strengthen oversight, TVING will create an Information Security Innovation Advisory Committee reporting directly to the CEO. The company also plans to reinforce its security governance around the CEO, chief information security officer and chief privacy officer.
The breach is also increasing TVING’s costs on the customer-compensation side.
The company will provide eligible customers with a one-year insurance policy covering cyber-related financial fraud, including losses stemming from hacking and phishing, of up to 3 million won, or about $2,200, per person.
Current TVING subscribers will receive access to a premium viewing experience from October through December without having to submit a separate application. Customers will also receive 5,000 won, or about $3.70, in TVING points and may choose between a one-month subscription to Wavve’s ad-supported streaming plan and a discount coupon for CGV movie theaters.
Customers can apply for the compensation package from September 7 through September 30, with benefits taking effect October 6.
The program includes customers whose affected accounts were dormant or had been terminated. Former subscribers with terminated accounts will have to re-register with TVING so the company can verify their identities and match them against the compromised records, but they won’t be required to purchase a paid subscription.
The government’s joint investigation found that information associated with 39.5 million active, dormant and terminated accounts had been exposed in the breach.
For streaming companies, the incident highlights a broader challenge: the more platforms consolidate subscriber identities, viewing histories and payment-related information, the greater the potential financial and reputational cost of a security failure. TVING’s planned spending surge reflects the growing pressure on digital-entertainment companies to treat cybersecurity as a fundamental part of their competitive infrastructure.
