Tving suffered a hacking incident that leaked information on 39.54 million user accounts, effectively all accounts on the platform, an investigation team said on Wednesday. Attackers stole a developer access key, penetrated the development environment and then accessed production systems to extract personal data. Leaked data included IDs, encrypted passwords and other personal information, while 361 development projects containing source code were also taken. No confirmed misuse has been found so far.

Tving has confirmed that 39.54 million account records were leaked in a security breach, including 22.06 million active accounts and 17.37 million inactive accounts such as dormant or withdrawn users. The attacker stole a developer access key, entered the internal development environment and then moved into the production environment, investigators said. Leaked data included IDs, passwords, names, phone numbers, emails, birth dates, linked information and payment history, among other items.