South Korean Crypto Exchange Coinone's Customer Service Outsourcing Server Hacked, Some Users' Inquiry Information Leaked
November 15 — South Korean crypto exchange Coinone announced that a server of its customer inquiry outsourcing contractor was illegally accessed by external attackers in the early hours of November 12, resulting in the leak of personal information related to some customer inquiries. Coinone confirmed that only users who had made inquiries to the customer center are affected, and users without inquiry records are unrelated to this leak. The leaked information may include phone numbers, names, email addresses, dates of birth, bank account numbers, passwords, resident registration numbers, document issuance dates, home addresses, wallet addresses and transaction IDs (TXID) that users provided during inquiries, varying by individual.
Coinone emphasized that its member accounts, trading and virtual asset wallet systems are independent of the contractor's server, and no signs of direct intrusion have been found so far. Coinone has blocked the relevant IPs, reported the incident to the Korea Internet & Security Agency, the Personal Information Protection Commission and the Financial Supervisory Service, and is investigating the matter together with the contractor.