Weverse Apologizes for Personal Information Leak... "Will Strengthen Monitoring and Prevent Recurrence"

[Dispatch=Yuha Reporter] Global fandom platform Weverse Company apologized for a personal information leak.

Weverse Company stated on the 6th, "We recently received an external report regarding service security vulnerabilities. Following our investigation, we confirmed that some customers' personal information was leaked," and added, "We sincerely apologize to the fans who have cherished Weverse."

According to Weverse Company, they received notification of the security vulnerability from the Korea Internet & Security Agency on the 3rd and conducted an emergency self-inspection. The confirmed scale of the leak is a total of 422,584 cases (based on account ID units).

The leaked items are general payment-related information. This includes internal identification information generated for user identification, purchase type, payment gateway name, currency type, purchase amount, cancellation amount, purchase date and time, purchase status, and refund date and time.

A Weverse Company official said, "The leaked internal identification information is an identification value used only within internal systems," and "it cannot be used externally." It is difficult for forgery or fraudulent transfers to occur with payment information alone.

After the incident, Weverse Company strengthened access control to the payment information processing API. They implemented security measures to remove internal identifier information. They conducted individual notifications to affected customers on the 4th according to relevant legal standards.

The official stated, "We will conduct a comprehensive investigation of externally exposed APIs. We will strengthen access control and minimize exposed information," and emphasized, "We will strengthen controls on the distribution process and enhance the sensitivity of security monitoring, and will make our best effort to prevent recurrence."

They added, "We have requested the recovery of personal information from the attacker. We plan to hold legal responsibility for the damage incurred," and continued, "We will take responsible measures to resolve customers' concerns and worries."

by. Hanuel Yoo