Coinone's customer service outsourcing provider was hacked, resulting in the leakage of some users' personal information.

South Korean crypto exchange Coinone announced that in the early hours of November 12, servers of its customer service outsourcer MetaM were breached by external attackers, leading to the leakage of personal information left by some customers during chat or phone consultations. Coinone received a report from the outsourcer at approximately 9:20 AM the same day, and disclosed the incident on November 15. Users with no customer service consultation records are not affected. Coinone noted that its account, trading, and wallet systems operate independently of the outsourcer’s servers, and no direct breaches of these core systems have been detected. Potentially leaked data includes: name, phone number, email, date of birth, account number, password, South Korean resident registration number, document issuance date, residential address, wallet address, and transaction hash (TXID). The actual leaked items vary per user based on the information they provided during consultations. Coinone has not yet disclosed the number of affected users, and will inform users via individual notifications or a dedicated query service in the future. The exchange has blocked unauthorized access paths, switched outsourced customer services to email-based consultations, and strengthened monitoring of abnormal logins and transactions. It has also reported the incident to relevant South Korean regulatory authorities, and reminded users who provided passwords during customer service interactions to change their passwords for Coinone and all other sites using the same password immediately, as well as to beware of phishing calls, SMS, and emails impersonating customer service staff.