Customer Service Data Subject to Unauthorized Access, Coinone Says Account Access Requires Two-Factor Verification

Odaily reports: South Korean exchange Coinone has announced that the servers of its outsourced customer service provider MetaM were accessed without authorization by external attackers in the early hours of November 12. Coinone received a report from the vendor at approximately 9:20 that day; MetaM stated that its customer service was interrupted at 6:03, after which it discovered the anomaly and confirmed that phone numbers and inquiry conversations had been subject to unauthorized access, and reported the matter to the Korea Internet & Security Agency (KISA) on November 13.



Potentially affected information includes names, phone numbers, email addresses, dates of birth, bank account numbers, passwords, Korean resident registration numbers, ID document issue dates, addresses, crypto wallet addresses, and transaction IDs, varying by customer; customers who have not contacted the customer service center are not affected, and the number of affected individuals has not yet been disclosed. Coinone stated that its core crypto infrastructure is isolated from customer service servers, and as of November 15 no evidence of direct intrusion into account, transaction, or wallet systems had been found, and account access requires OTP or KakaoTalk two-factor verification. Coinone has blocked the attackers' IPs, switched customer service to email-only handling, and reported the matter to KISA, the Personal Information Protection Commission, and the Financial Supervisory Service.