MetaM customer service systems hacked, exposing phone numbers and conversations
An external attack on some of MetaM’s customer service systems revealed indications that phone numbers and customer service conversations had been accessed without authorisation or exfiltrated. MetaM became aware of the incident following a customer service outage at 6:03 am on 12 November 2026. During its investigation, the company found that abnormal access to some services had occurred before it became aware of the incident, and it is investigating the extent of any further data exposure and the intrusion vector.
Key facts
- Affected organisation
- MetaM
- Incident type
- Data breach
- Occurred / detected
- 2026-11-12
- Scale of damage
- Phone numbers and customer service conversations in some customer service systems
- Cause / method
- Abnormal access to customer service systems through an external attack
- Location
- South Korea
If your data was exposed
Exposed dataPhone numberUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- MetaM became aware of the security incident following a customer service outage at 6:03 am.
- Indications of unauthorised access to and exfiltration of phone numbers and customer service conversations were disclosed, along with an investigation into the extent of the data exposure and the intrusion vector.
- It was disclosed that abnormal access to some services had occurred before the incident was detected.
Also affected by this incident
Hack at Coinone customer support contractor exposes personal information
↳ Knock-on damage from the MetaM incident · View original incidentOn 12 November 2026, an external attacker illegally accessed servers belonging to MetaM, Coinone’s customer support contractor, and viewed or exfiltrated customer support information. The exposed data included names, phone numbers, email addresses, bank account numbers, passwords, resident registration numbers and identity document issue dates that customers themselves provided during chat or telephone consultations, with the specific data varying according to each person’s consultation.
Related reports: 2 →
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.