Coinone Data Breach: Hacker Got Into Its Customer-Support Contractor, Passwords and ID Numbers Exposed

Coinone, one of South Korea's big crypto exchanges, said on November 15 that a hacker got into the servers of its outsourced customer-support company and accessed customer records. The exchange says its own trading, account and wallet systems are separate and show no sign of a break-in, and no loss of funds has been reported. But the leaked records include some really sensitive stuff, including passwords and national ID numbers.

Updated November 15, 2026. Number of affected users not disclosed yet.

Related: Coinbase Customer Data Exposed Through Analytics Vendor Amplitude: What We Know and How to Stay Safe · Binance Hacker Dumps Stolen XRP: 171.7M of 233M Sold Since Nov 5, About 62M Left

The short version

What happened

Coinone doesn't run its own customer-support desk. It hires a company called MetaM to handle it. According to DigitalToday and Crypto Briefing, someone got into MetaM's servers early on November 12 and accessed the records from customer-support conversations. Coinone noticed the same morning and went public three days later.

So this isn't a hack of the exchange itself. It's a hack of the company answering its support tickets. That's the same weak spot we saw in October with the Coinbase customer data leak through a vendor. Exchanges can lock down their own systems tight, and then the data walks out through a contractor.

We may earn a commission from links on this page.

If you want to understand why this keeps happening, and why "not your keys, not your coins" gets repeated so much, The Bitcoin Standard gets into the whole idea of holding your own money instead of trusting someone else to.

What was in the leaked records

This is the bad part. DigitalToday lists these fields as possibly exposed, depending on what each customer gave support:

• Name, email address, phone number and date of birth
• Bank account numbers
• Passwords
• Resident registration numbers (South Korea's national ID number) and ID card issue dates
• Home addresses
• Crypto wallet addresses and transaction IDs

Not every customer had all of this in their file. It depends on what you typed or sent to support. But if you ever opened a ticket and shared your password or ID to "verify" yourself, it may be out there now.

Were any coins stolen?

Not according to Coinone. The exchange says member accounts, the trading system and the digital asset wallets run separately from MetaM's servers, and no direct intrusion into its own systems has been confirmed so far. No loss of funds has been reported.

That said, wallet addresses and transaction IDs in a leak are a gift to scammers. They can see what you hold and when you moved it, and use that to make a fake message sound real.

What Coinone did

• Blocked the attacker's IP address and access to the customer center
• Moved customer support to email only for now
• Reported it to the Korea Internet & Security Agency (KISA), the Personal Information Protection Commission and the Financial Supervisory Service
• Is looking into the exact timing with MetaM and outside specialists

It hasn't said how many people were affected yet. I'll add that when it does.

If you use Coinone, do this

• Expect phishing. Coinone itself warned about voice phishing from people pretending to be Coinone using the leaked info. If someone calls and knows your name, birthday and wallet, that doesn't make them real. Hang up and contact Coinone yourself.
• Change your password, especially if you ever shared it with support or use it anywhere else. Change it on those other sites too.
• Turn on two-factor authentication with an app, not text messages, if you haven't already. Never read a code to anyone over the phone.
• Watch your bank account for anything odd, since account numbers were in the records.

For coins you're holding long term, the safest spot is still off the exchange on a hardware wallet, where a leak at some support company can't touch them.

Like this kind of news? Get the WIZY weekly: one email every Sunday, no spam.

Part of a rough few weeks

This is one more on a long list. We keep all of them in our crypto hacks 2026 tracker, from the $6.3 billion Binance hack down to data leaks like this one. The pattern lately is clear enough: a lot of the damage comes through third parties, not the main platform.

If the scam side of crypto is what worries you, The Cryptopians by Laura Shin is a good read on how much of crypto's history is about trust going wrong.

FAQ

Was Coinone hacked?

Its outsourced customer-support company, MetaM, was. Coinone says its own trading, account and wallet systems weren't directly breached.

Did Coinone users lose money?

No loss of funds has been reported. The risk is phishing and identity theft from the leaked records.

Am I affected?

Only if you contacted Coinone's customer support. Coinone hasn't said how many users that is.

This is news, not financial advice.