South Korean crypto exchange Coinone disclosed that an external attacker compromised its customer service outsourcing provider's server on November 12, leaking personal information from user consultation records. Only users who had contacted the customer center were affected; those without inquiry history were not involved. The exposed data may include phone numbers, names, email addresses, dates of birth, bank account numbers, passwords, resident registration numbers, ID issuance dates, home addresses, wallet addresses, and transaction IDs (TXID), depending on what each user provided during their inquiries. Coinone emphasized that its member accounts, trading systems, and virtual asset wallets operate independently from the outsourced server and showed no signs of direct intrusion. Coinone has blocked the relevant IP addresses and reported the incident to Korea's Internet & Security Agency, Personal Information Protection Commission, and Financial Supervisory Service. The exchange is jointly investigating the breach with its outsourcing partner.