The South Korean digital asset platform stated that potentially compromised details encompass passwords, banking digits, government identification numbers, and cryptocurrency wallet addresses.
South Korean digital asset exchange Coinone cautioned users regarding potential phishing attacks and identity theft incidents after a malicious actor penetrated its third-party customer support vendor, leaking details shared during customer service communications.
On Sunday, Coinone announced that a hacker gained entry to systems managed by MetaM on Thursday, viewing or harvesting customer support logs. Coinone mentioned that it discovered the security incident on the very same day.
Based on Coinone’s report, the potentially exposed data covers names, telephone numbers, electronic mail addresses, birthdays, banking numbers, passcodes, national ID numbers, residential and wallet addresses, plus transaction identifiers.
Coinone noted that the impacted records differ per user, while individuals who never reached out to its help desk remained untouched. The company refrained from revealing the exact number of impacted clients.
The trading platform advised users who disclosed passwords during help desk chats to update them immediately, cautioning that malicious actors might pose as Coinone utilizing specifics gathered from past dialogues.
Coinone clarified that its profile management, trading engines, and wallet systems run independently from MetaM’s infrastructure, with zero proof of a direct breach. The platform confirmed it notified South Korean regulators about the event.
This disclosure arrives as South Korea works to enhance financial industry cybersecurity. Back in October, the Financial Services Commission flagged security vulnerabilities across 130 out of 555 evaluated financial institutions.
On Thursday, the oversight body stated it would permit crypto platforms to halt asset withdrawals whenever security breaches are suspected, alongside demands for continuous, round-the-clock surveillance.
Related: GOPAX halts crypto trading, withdrawals to move all assets to cold storage
Originally published at https://cointelegraph.com/news/coinone-data-breach-phishing-identity-theft-customer-information?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.