Coinone Customer Data Leak... Resident Registration Numbers, Wallet Addresses, etc.

Outsourced provider's server breached on the 12th

Personal information belonging to users was leaked after hackers breached a server operated by an outsourced customer service provider for cryptocurrency exchange Coinone.

Coinone logo. Coinone

On November 15, Coinone said in a notice that "an external attacker unlawfully accessed a server operated by MetaM, the company entrusted with customer service, and leaked customers' personal information." At around 4 a.m. on November 12, the attacker accessed and stole customer consultation records stored on MetaM's server. Coinone became aware of the incident at around 9:20 a.m. that day after being notified by the service provider.

Information that may have been leaked includes names, phone numbers, email addresses, dates of birth, account numbers, passwords, resident registration numbers, ID issuance dates, home addresses, cryptocurrency wallet addresses, and transaction identification numbers (TXIDs) that users provided during telephone or chat consultations. The information actually exposed varies according to each individual's consultation records. Coinone plans to provide separate notices and a lookup page so customers can check which of their information was leaked.

Coinone said that "member accounts, transaction systems, and cryptocurrency wallet systems are operated separately from the service provider's server, and no evidence of direct intrusion into those systems has been found so far." Coinone is investigating the exact timing and circumstances of the leak with the service provider and specialized agencies.

Immediately after becoming aware of the incident, Coinone blocked the internet protocol (IP) addresses and external access routes used in the attack and switched customer service to email consultations. It has stepped up monitoring for suspicious access and transactions, reported the incident to the Korea Internet & Security Agency (KISA), the Personal Information Protection Commission, and the Financial Supervisory Service, and is also reviewing the service provider's security management practices.

To prevent secondary 피해 such as impersonation and identity theft using the leaked information, Coinone advised customers who shared their passwords during consultations to change them and check their registered withdrawal addresses. Coinone said, "We feel a deep sense of responsibility for this incident and sincerely apologize," adding, "We will promptly inform you of any further findings."

This content was produced with the assistance of AI translation services.