Weverse Data Breach Exposes 422,584 User Accounts

Weverse Company confirmed a data breach affecting 422,584 user accounts on September 6, 2026. The breach was identified following an external report from the Korea Internet & Security Agency (KISA) about a security vulnerability. The leaked data includes internal identification numbers and transaction-related information such as payment methods, purchase amounts, and refund dates. However, no directly identifying personal information like names was exposed. Weverse has strengthened security measures, including enhanced access controls for its payment processing API and has filed a breach incident report with KISA. The company is also pursuing legal action against the external actor responsible for the breach. Users affected have been notified as per regulatory requirements. Weverse maintains that the leaked information does not pose a significant risk for payment fraud or unauthorized transactions.

Key Points: • 422,584 user accounts affected by the Weverse data breach. • Leaked data includes internal IDs and payment transaction details, but no personal identifiers. • Weverse has strengthened security measures and is pursuing legal action against the attackers.