Coinone: Customer service outsourcing vendor's server was hacked, user inquiry information leaked

The South Korean cryptocurrency exchange Coinone announced that in the early hours of November 12, its customer service outsourcing partner MetaM's server was externally breached, resulting in the leakage of some customers' personal information left during chat or phone consultations.

Coinone received a report from the outsourcing partner around 9:20 AM on the same day and disclosed the matter on November 15. Users without customer service consultation records are not affected by this incident. Coinone stated that its account, trading, and wallet systems operate independently from the outsourcing partner's server, and no direct intrusion into these systems has been found so far.
The potentially leaked information includes names, phone numbers, emails, birth dates, account numbers, passwords, Korean resident registration numbers, document issuance dates, addresses, wallet addresses, and transaction hashes (TXID). The actual leaked items vary based on the information provided by users during consultations. Coinone has not disclosed the number of affected individuals and will inform users through separate notifications or inquiry services.

Coinone has blocked the illegal access path, switched customer service to email consultations, and strengthened monitoring of abnormal logins and transactions. The platform has reported to the relevant regulatory authorities in South Korea and reminded users who provided passwords during customer service consultations to change their passwords on Coinone and other websites using the same password as soon as possible, and to be wary of phishing calls, texts, and emails impersonating customer service.