Coinone flags phishing risk after contractor-linked customer data exposure
Coinone warned customers that a contractor-linked breach may have exposed sensitive account and identity information, increasing phishing and identity-theft risks.
Coinone warned customers that a contractor-linked breach may have exposed sensitive account and identity information, increasing phishing and identity-theft risks. This is an original TLT brief based on reporting by Cointelegraph, with live market data added, as of Sun, 15 Nov 2026 19:30:04 UTC.
The reported exposure could affect both exchange accounts and off-platform financial identities because the potentially compromised fields include passwords, bank details and wallet addresses. The incident highlights how a third-party contractor can extend the security perimeter around a centralized exchange’s customers.
- Coinone says a contractor-linked breach may have exposed customer credentials and identity data.
- Potentially exposed fields include bank details, national IDs, and wallet addresses.
- Bitcoin fell 1.99% over 24 hours amid extreme fear readings.
Coinone disclosed a security breach linked to contractor MetaM that may have exposed information belonging to customers, according to Crypto.news. The South Korean crypto exchange is warning affected users about the possibility of phishing attempts and identity theft, with the incident illustrating how sensitive data can leave an exchange’s direct systems through a service provider.
Cointelegraph reported that the potentially exposed information includes passwords, bank account numbers, national identification numbers and cryptocurrency wallet addresses. The wording establishes that the exposure was identified as possible rather than providing a confirmed count of affected customers, and the supplied coverage does not specify a breach date, number of records or financial losses. Combination of these fields could also complicate remediation because some information relates to exchange accounts while other data could be used outside Coinone’s platform.
Both outlets agree on the central response from Coinone: customers have been warned about phishing and identity-theft risks. Crypto.news contributes the detail that the incident involved contractor MetaM, whereas Cointelegraph’s summary focuses on the range of data that may have been exposed. Neither outlet reports a numerical figure for the affected customers or says that customer funds were stolen, and the summaries contain no direct contradiction about the breach’s nature.
The disclosure connects exchange operations to a wider security perimeter. Passwords may affect access to accounts, while national identification numbers and bank account details can create risks beyond the exchange, and wallet addresses can potentially be used to target customers through fraudulent requests or spoofed communications. Coinone’s contractor attribution also places MetaM within the chain of parties relevant to reviewing how customer information was handled and secured.
The broader market snapshot shows total crypto market capitalization at $2.28 trillion, with the overall market broadly lower. 
Bitcoin was down 1.99% over 24 hours, while the Fear & Greed index stood at 10, labelled Extreme Fear. No Coinone-linked token or specific exchange asset reaction was supplied. The principal items to watch are confirmation of the exposed fields and customer count, any further disclosure about MetaM’s role, and Coinone’s findings on whether misuse or attempted misuse occurred.
Coinone flags phishing risk after contractor-linked customer — questions & answers
What information may have been exposed in the Coinone breach?
Potentially exposed fields include passwords, bank account numbers, national identification numbers and crypto wallet addresses, according to Cointelegraph.
Which contractor was involved in the incident?
Crypto.news reported that Coinone’s disclosure linked the breach to contractor MetaM. Neither outlet provided further detail about the contractor’s access or responsibilities.
Was theft of customer funds reported?
The supplied summaries do not report stolen customer funds. They focus on possible exposure of personal, financial and account information.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from Cointelegraph. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.