MapleStory Universe server breach exposes user information
On 12 November, unauthorised external access occurred in the off-chain server infrastructure of Nexon's blockchain game MapleStory Universe. The exposed data included users' wallet addresses, nicknames, connection IP addresses, locations, the first 12 characters of email addresses, transaction histories and session keys, along with API keys for 328 developer applications. The operations team put all services into emergency maintenance, and no theft of cryptoassets was confirmed.
Key facts
- Affected organisation
- Nexon
- Incident type
- Data breach
- Occurred / detected
- 2026-11-12
- Scale of damage
- User information and API keys for 328 developer applications exposed
- Cause / method
- Unauthorised external access to off-chain server infrastructure
- Location
- South Korea
If your data was exposed
Exposed dataEmailUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Unauthorised access to the off-chain server infrastructure prompted a temporary suspension of services.
- The exposure of user information and API keys for 328 developer applications was disclosed, with no theft of cryptoassets confirmed.
4 related reports
Other incidents at Nexon
Nexon spends 14 years bolstering security after leak of 13.2 million users' data
13.2mImpact: Data of 13.2 million people leaked
The data of 13.2 million people was leaked from Nexon. Nexon has spent the 14 years since then strengthening its security.
Read on 딜사이트 ↗Tampered Nexon Blue Archive CDN settings cause abnormal content exposure
Impact: Abnormal exposure of some content
An external attacker accessed the CDN configuration of Nexon's Blue Archive and altered the settings without authorisation, causing some content to be displayed abnormally. Nexon carried out emergency maintenance and blocked the attacker's access. It said user accounts, game data and payment information were not affected.
Related reports: 6 · last report →Dynamis One raided over suspected Nexon data leak
South Korean police raided game developer Dynamis One in connection with a suspected Nexon data leak. Whether data was leaked, the volume of data and the specific circumstances of the leak are unknown.
Read on Game Developer ↗Nexon weighs response to subscription-based DDoS attacks
Nexon is weighing how to respond to DDoS attacks. The emergence of DDoS attacks as a subscription service was raised as a problem.
Read on 바이라인네트워크 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.