Summary
- Coinone said a customer personal data breach occurred after an outsourced vendor was hacked.
- Coinone said member accounts, trading systems and crypto wallet systems are operated separately, and no signs of direct intrusion have been found.
- Coinone said it reported the incident to relevant authorities and will conduct a full review and strengthening of its partners' security management systems.
Forecast Trend Report by Period
Customer personal data at South Korean cryptocurrency exchange Coinone was exposed after a third-party contractor handling customer support was hacked.
In a notice posted on November 15, Coinone said it confirmed that an outside attacker gained unauthorized access to servers operated by MetaM, its outsourced customer-service provider, at around 4 a.m. on November 12 and viewed or leaked customer support information.
The information that may have been exposed includes names, phone numbers, email addresses, dates of birth, bank account numbers, passwords, resident registration numbers and wallet addresses that customers provided during consultations. The specific data leaked may differ by customer. Users with no history of contacting the customer center were not affected.
Coinone said member accounts, trading systems and crypto wallet systems are operated separately from the vendor's servers. No signs of direct intrusion into those systems have been identified so far, it said.
After becoming aware of the incident, Coinone blocked related access and shifted customer-service operations to email support. It also reported the case to the Korea Internet & Security Agency, the Personal Information Protection Commission and the Financial Supervisory Service, and is investigating the exact cause of the leak.
"We deeply apologize for the inconvenience and concern caused to customers by this incident," Coinone said. "We will conduct a full review of our partners' security management systems and strengthen them."
Uk Jin
