Coinone Customer Data Leaked After Outsourced Support Server Breach
TREE NEWS reports: South Korean cryptocurrency exchange Coinone disclosed on November 15 that a server belonging to its customer service outsourcing partner, MetaM, was illegally accessed by an external attacker on November 12. The breach may have exposed sensitive user information provided during chat or phone consultations, including names, phone numbers, email addresses, passwords, account numbers, and wallet addresses. The specific data affected varies by individual. Coinone stated that users who have never used the customer center are not impacted.
The exchange emphasized that its member accounts, trading systems, and crypto asset wallet infrastructure are separated from the outsourced server, and no direct intrusion into those systems has been detected. Following the incident, Coinone has switched its outsourced customer service to email-only inquiries, blocked the unauthorized access path, and reported the matter to relevant authorities. An investigation is underway with the outsourcing partner and professional security firms.
Industry Analysis: Third-Party Risk in Crypto
This incident underscores a persistent vulnerability in the cryptocurrency industry: third-party service providers often handle sensitive customer data, yet their security standards may not match those of the exchange itself. While Coinone’s core systems appear unaffected, the leak of wallet addresses and account details could expose users to targeted phishing attacks and social engineering. Unlike traditional finance, where account numbers are less directly linked to asset ownership, crypto wallet addresses can be used to trace holdings and craft convincing scams.
The breach also highlights regulatory scrutiny. South Korea has been tightening its oversight of virtual asset service providers (VASPs) under the Act on the Protection of Virtual Asset Users, which emphasizes the protection of user assets and data. Exchanges are increasingly held accountable for the security practices of their partners, not just their own infrastructure. Coinone’s prompt disclosure and shift to email-only support may help mitigate reputational damage, but the incident could prompt regulators to demand stricter vendor risk management protocols.
Forward-Looking Perspective
As crypto exchanges continue to rely on outsourcing for cost efficiency, the industry must adopt more rigorous third-party risk assessments, including regular security audits and data minimization practices. The leak also serves as a reminder for users to remain vigilant against phishing attempts and to use hardware wallets or cold storage for significant holdings. Coinone’s investigation will be closely watched to see whether it reveals systemic gaps in vendor oversight. In the long run, exchanges that prioritize transparency and robust partner security will be better positioned to maintain user trust in an increasingly competitive market.
