Weverse Reports Data Breach Affecting Over 422,000 Users
Weverse has announced a data breach that has affected 422,584 user accounts. On September 6, Yang Zooil, the president of Weverse Company, released a formal statement regarding the data security incident. The breach was reported to the company by the Korea Internet & Security Agency (KISA) on September 3, 2026, prompting an immediate internal inspection. The investigation confirmed that personal information had been leaked, although the leaked data does not include directly identifiable information such as names or contact details. Instead, it consists of internal identifiers used within Weverse's systems.
In response to the breach, Weverse has implemented enhanced security measures for its payment information processing API, including improved access controls and the removal of internal identifiers to prevent further data exposure. The company has also filed a breach incident report with KISA, detailing the findings of their inspection and the steps taken to address the situation.
Weverse is committed to conducting a thorough investigation of all externally exposed APIs to strengthen security and minimize the risk of future incidents. They have also requested the retrieval of the compromised personal information from the external party responsible for the breach and intend to pursue legal action against those involved. Yang Zooil emphasized the company's responsibility in this matter and expressed sincere apologies to users for the distress caused by the incident. Weverse aims to restore user trust and ensure the safety of their data moving forward.
