According to Coinone's official statement on Nov 15, the South Korean crypto exchange's outsourced server operated by MetaEM was breached by external attackers, exposing customer support consultation records. The unauthorized access occurred on Nov 12 at 4 a.m., and the company was notified of the breach at 9:20 a.m. the same day, a gap of approximately five hours and 20 minutes.
Exposed customer data includes phone numbers, names, emails, dates of birth, account numbers, passwords, ID numbers, addresses, and wallet addresses collected during customer service interactions. Coinone emphasized that its core account systems, trading systems, and asset wallets remain operationally separate from the compromised outsourced server and have not been directly breached. The company has reported the incident to South Korea's Internet & Security Agency, Personal Information Protection Commission, and Financial Supervisory Service.