South Korean exchange Coinone’s customer-service outsourcing provider was breached: users with inquiry records should beware of phishing—not a wallet theft
South Korean exchange Coinone announced today (November 15) at 08:00 that the servers of customer-service outsourcing provider MetaM were attacked by an external party at around 04:00 on November 12. Personal information left by some customers during chat or phone inquiries may have been accessed or leaked. The official notice stated that users with no customer-service inquiry records were not affected by this leak.
What happened: The information potentially involved includes the phone number used for the inquiry, name, email address, bank account, password, resident registration number, home address, wallet address, and transaction identification code. This is a list of possible data types; what was actually exposed varies by person. The number of affected people has not yet been announced. Coinone says its member account, trading, and wallet systems operate separately from the outsourcing provider’s servers, and no direct intrusion into those systems has been detected so far. Customer service has switched to email inquiries, and the incident has been reported to South Korean regulators.
Who is affected: People with records of customer-service inquiries with Coinone are the most directly affected. The leaked information could be used in scams by people impersonating customer-service agents. If you disclosed or entered your password during an inquiry, change your Coinone password and any identical passwords used on other websites. The official notice emphasizes that Coinone will never ask for your password, OTP, or verification code by phone, text, or email, nor ask you to withdraw funds or change your wallet address. People who have never used Coinone, or who have no inquiry records, are not directly affected by this leak. This was not a hot-wallet theft, and the notice did not mention suspending deposits or withdrawals.
What to check next: When the official data-leak lookup service under development will launch, and whether the number of affected people and the precise scope of the leak will be updated. If you receive a call or link referring to details of your inquiry, verify it through official channels first.
Have you recently received a call or text from someone claiming to be Coinone customer service and asking for a verification code or a change to your withdrawal address?
This is not investment advice.
Source: Coinone official notice “Notice Regarding the Personal Information Leak” (2026-11-15 08:00, https://coinone.co.kr/info/notice/5950); Wu Shuo X (around 11:13 HKT, https://x.com/wublockchain12/status/2121803835060695476) · 2026-11-15 Hong Kong time
#Coinone #信息泄露 #防钓鱼 #HangBMedia