Weverse data leak affects 420000 users

HYBE’s fandom platform said payment methods, transaction amounts and user IDs were exposed, but names and details were not.

Data from 420,000 users has been leaked from Weverse, a global fandom platform made by HYBE, according to a statement posted by the platform on Sunday.

The leaked information includes payment methods, customers’ transaction amounts and internal user identification codes, but did not include names or information of the users.

Created in 2019, the platform is managed by Weverse Company, a subsidiary of HYBE, an entertainment company known for managing K-pop acts such as boy band BTS and girl group Le Sserafim.

Tving opens compensation claims after data leak affecting 39.5 million accounts

Tving opens compensation claims after data leak affecting 39.5 million accounts

Nearly 40 million accounts compromised in Tving hack, investigation finds

Nearly 40 million accounts compromised in Tving hack, investigation finds

Musinsa subsidiary 29CM's data breach affects 159,000 customers

Musinsa subsidiary 29CM's data breach affects 159,000 customers

Weverse users can watch livestreams by their favorite K-pop artists or send direct messages to the artists with a paid subscription of 5,100 won ($3.80).

The company began its internal investigation after receiving a report from the Korea Internet & Security Agency (KISA) of its security blind spots on Thursday.

The statement said there is “no possibility of fraudulent charges or transactions with the leaked information.”

The platform has reportedly notified the affected users under regulatory requirements.

The platform's management reportedly strengthened its API key code access and notified KISA the breach on Friday. The company plans to pursue legal action for those responsible.

BY LEE JI-WON [[email protected]]