Finance.Biggo Weverse Data Breach Exposes 422,584 User Accounts
Article Content
- •422,584 user accounts affected by the Weverse data breach.
- •Leaked data includes internal IDs and payment transaction details, but no personal identifiers.
- •Weverse has strengthened security measures and is pursuing legal action against the attackers.
Weverse Company confirmed a data breach affecting 422,584 user accounts on September 6, 2026. The breach was identified following an external report from the Korea Internet & Security Agency (KISA) about a security vulnerability. The leaked data includes internal identification numbers and transaction-related information such as payment methods, purchase amounts, and refund dates. However, no directly identifying personal information like names was exposed. Weverse has strengthened security measures, including enhanced access controls for its payment processing API and has filed a breach incident report with KISA. The company is also pursuing legal action against the external actor responsible for the breach. Users affected have been notified as per regulatory requirements. Weverse maintains that the leaked information does not pose a significant risk for payment fraud or unauthorized transactions.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track HYBE in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…