South Korean cryptocurrency exchange Coinone has confirmed a leak of users' personal data. The incident occurred as a result of the compromise of servers belonging to third-party contractor MetaM, which handles customer support request processes. Attackers gained unauthorized access to archives of client tickets.
What data was at risk
Among the potentially compromised information is a wide range of personal details: usernames, phone numbers, bank details, identity document data, credentials (passwords), and cryptocurrency wallet addresses. The exchange does not disclose the exact number of affected individuals, which in itself points to the scale of the problem, which requires further assessment.
The platform's response
Coinone stated that no signs of compromise of its own platform infrastructure were detected — the leak occurred exclusively on the contractor's side. The exchange warned clients of an increased risk of phishing attacks and attempts by attackers to impersonate users using stolen information. Users who submitted passwords in the process of contacting support are strongly advised to change their credentials.
The incident once again demonstrates that the service provider chain remains one of the most vulnerable points in the security architecture of crypto platforms. Even with robust protection of its own systems, an exchange inherits the risks of its contractors that work with sensitive client data.
Cryptalist analysis: The Coinone case illustrates a systemic problem in the industry — outsourcing the processing of client data to external contractors creates a shadow security perimeter that is rarely subjected to as strict an audit as the platform's core. For the market, this is a signal to revisit third-party risk management practices and tighten requirements for the processing of personal data in outsourcing. Investors and traders should assess not only the technical protection of the exchange itself but also the transparency of its supplier chain.