Coinone warns of data breach via support provider

South Korean cryptocurrency exchange Coinone has issued urgent warnings regarding potential phishing scams and identity theft following a security breach at its outsourced customer support provider, MetaM. The incident has raised fresh concerns among users of the popular trading platform.

According to Coinone, an attacker accessed servers operated by MetaM and viewed or extracted records generated during customer service interactions. The platform discovered the unauthorized access shortly after it occurred on Thursday and publicly disclosed the details on Sunday. The compromised data potentially includes names, phone numbers, email addresses, dates of birth, bank account numbers, passwords, national identification numbers, home and wallet addresses, and transaction IDs.

Coinone clarified that the severity of the exposure varies among individuals, and users who never contacted customer support remained entirely unaffected. The exchange chose not to disclose the exact total of impacted customers. However, officials strongly urged anyone who previously shared passwords during support inquiries to update them immediately. The platform also cautioned that malicious actors could attempt impersonation using details gathered from prior conversations.

Coinone warned of potential phishing and identity theft after a support provider data breach.

Despite the breach, Coinone emphasized that its core account, trading, and wallet infrastructure operates on separate servers from MetaM, showing no signs of direct compromise. The exchange confirmed it reported the security incident directly to South Korean authorities.

Strengthening financial cybersecurity

The disclosure arrives while South Korea actively works to bolster cybersecurity standards across its financial sector. The Financial Services Commission recently reviewed multiple financial institutions and identified security shortcomings. Regulators are introducing measures allowing cryptocurrency exchanges to suspend withdrawals promptly when hacking is suspected, alongside stricter continuous monitoring mandates.

Why it matters

This security breach highlights the vulnerabilities associated with third-party vendors in the digital asset industry, directly impacting platform users who rely on safe customer service channels. For investors and market participants globally, the event underscores the critical need for robust operational security across all outsourced service partners in the cryptocurrency ecosystem.