Coinone Discloses MetaM Server Breach Involving Customer Support Data

A breach at Coinone’s outsourced support provider may have exposed customer records, including passwords and bank account numbers. Coinone said it had found no signs of direct intrusion into its account, trading or wallet systems.

Coinone disclosed the incident at 6 p.m. ET Saturday, Nov. 14 (23:00 UTC). It said an attacker accessed MetaM’s server at about 2 p.m. ET Wednesday, Nov. 11 (19:00 UTC), and customer-support records may have been viewed or leaked.

The potentially affected information covers 11 categories: names, phone numbers, email addresses, birth dates, bank account numbers, passwords, South Korean resident registration numbers, ID issue dates, home addresses, crypto wallet addresses and transaction IDs. Customers provided the information through support calls or chats, and the records involved may differ by person. Coinone has not disclosed how many customers may be affected.

Coinone said MetaM’s server operated separately from its account, trading and crypto wallet systems, and it had found no signs those systems were directly breached. The exchange blocked the access route and increased monitoring for unusual account access and trading.

Coinone reported the incident to the Korea Internet & Security Agency (KISA), the Personal Information Protection Commission (PIPC) and the Financial Supervisory Service (FSS). It is investigating with MetaM and outside specialists and plans to notify customers about affected information or provide a personal-data breach lookup service.