MapleStory Universe server breach exposes user information
On November 12, unauthorized external access occurred in the off-chain server infrastructure of Nexon's blockchain game MapleStory Universe. Exposed data included users' wallet addresses, nicknames, connection IP addresses, locations, the first 12 characters of email addresses, transaction histories and session keys, as well as API keys for 328 developer applications. The operations team placed all services under emergency maintenance, and no theft of crypto assets was confirmed.
Key facts
- Affected organization
- Nexon
- Incident type
- Data breach
- Occurred / detected
- 2026-11-12
- Scale of damage
- User information and API keys for 328 developer applications exposed
- Cause / method
- Unauthorized external access to off-chain server infrastructure
- Location
- South Korea
If your data was exposed
Exposed dataEmailUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Unauthorized access to the off-chain server infrastructure led to a temporary service suspension.
- The exposure of user information and API keys for 328 developer applications was disclosed, with no theft of crypto assets confirmed.
4 related reports
Other incidents at Nexon
Nexon has spent 14 years strengthening security after leak of 13.2 million users' data
13.2MImpact: Data of 13.2 million people leaked
The data of 13.2 million people was leaked from Nexon. Nexon has spent the 14 years since then building up its security.
Read on 딜사이트 ↗Tampered Nexon Blue Archive CDN settings cause abnormal content exposure
Impact: Abnormal exposure of some content
An external attacker accessed the CDN configuration of Nexon's Blue Archive and altered the settings without authorization, causing some content to be displayed abnormally. Nexon carried out emergency maintenance and blocked the attacker's access. It said user accounts, game data and payment information were not affected.
Related reports: 6 · last report →Dynamis One raided over suspected Nexon data leak
South Korean police raided game developer Dynamis One in connection with a suspected Nexon data leak. Whether data was leaked, the volume of data, and the specific circumstances of the leak are unknown.
Read on Game Developer ↗Nexon weighs response to subscription-based DDoS attacks
Nexon is weighing how to respond to DDoS attacks. The emergence of DDoS attacks as a subscription service was raised as a problem.
Read on 바이라인네트워크 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.