This article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
Hack of MetaM vendor servers exposed Coinone customers' personal data. Potential exposure includes resident registration numbers and bank account numbers.
Vendor hack exposes data
South Korean crypto exchange Coinone said an external attacker broke into the server of its outsourced customer counseling vendor MetaM at around 4 a.m. on the 12th and viewed or extracted customer counseling information. Coinone said it learned of the incident after receiving a report from the vendor at around 9:20 a.m. the same day, and it later confirmed the intrusion circumstances and notified affected customers. Coinone said the potentially exposed items went beyond names and contact details to include resident registration numbers, bank account numbers and passwords, along with phone numbers, email addresses, dates of birth and home addresses.
Coinone said users with no customer center counseling history were not affected, and it said member accounts and wallet systems are operated separately from the vendor's servers with no evidence of direct intrusion confirmed so far. Coinone said it blocked the attacking IP addresses, strengthened real-time monitoring, and switched its customer center to email-based counseling after the breach.
Scams and password resets
Coinone warned that secondary harm could follow from misuse of leaked information, including voice phishing, phishing emails, spam text messages and identity theft. Coinone urged customers who provided their passwords during counseling to change not only their Coinone account password but also the passwords of other services where they use the same password. Coinone cautioned customers about contacts impersonating Coinone that demand passwords, one-time passwords (OTPs) or verification codes, or that request virtual asset withdrawals or changes to wallet addresses.
Coinone said it plans to let customers check their own leak records through separate notices or a personal data leak lookup service. Coinone said it reported the incident to the Korea Internet & Security Agency, the Personal Information Protection Commission and the Financial Supervisory Service, and it is investigating the intrusion route and scope of the leak together with the vendor and specialized agencies.
Liability and regulatory steps
Coinone told customers that those who suffered losses from the incident can claim damages or statutory damages under relevant laws, and it said statutory damages can be up to 3 million won when proving actual losses is difficult. Coinone said it is investigating the exact timing and cause of the leak with the contractor and specialized agencies, while it directly inspects the contractor's security management as well. Coinone said it switched the outsourced customer center to email support and blocked the IPs used in the attack and access to the customer center.
Coinone said it has found no indication so far that its member accounts, trading, and virtual-asset wallet systems were directly breached, and it said those systems operate separately from MetaM's server. Coinone said it reported the breach to the Korea Internet & Security Agency, the Personal Information Protection Commission and the Financial Supervisory Service, as it continued to strengthen monitoring for abnormal access and transactions.
