Weverse data leak affects 420,000 users

Data from about 420,000 users has been leaked from Weverse, a global fandom platform made by HYBE, according to a statement posted by the platform on Sunday.

The leaked information includes payment methods, customers’ transaction amounts and internal user identification codes, but did not include names or contact information of the users.

Created in 2019, the platform is managed by Weverse Company, a subsidiary of HYBE, an entertainment company known for managing K-pop acts such as boy band BTS and girl group Le Sserafim.

Weverse users can watch livestreams by their favorite K-pop artists or send direct messages to the artists with a paid subscription of about 5,100 won ($3.80).

The company began its internal investigation after receiving a report from the Korea Internet & Security Agency (KISA) of its security blind spots on Thursday.

The statement said there is “no possibility of fraudulent charges or transactions with the leaked information.”

The platform has reportedly notified the affected users under regulatory requirements.

The platform's management reportedly strengthened its API key code access and notified KISA about the breach on Friday. The company plans to pursue legal action for those responsible.

BY LEE JI-WON [lee.jiwon10@joongang.co.kr]