WeVerse Data Breach Hits 422,584 Users, Leaking Purchase Information
WeVerse, the fan platform operated by HYBE, disclosed a data leak affecting 422,584 accounts. The breach exposed payment methods, currency types, purchase amounts and timestamps, but not card numbers or personal details. The company is investigating and notifying affected users.
The breach was flagged by South Korea's internet security agency, prompting WeVerse to launch an internal review. CEO Zooile Yang, who assumed leadership in June, confirmed that individual notifications are being sent to affected users while the company works to bolster its security measures.
The platform, which launched in 2019, boasts a vast global reach with roughly 10 million monthly active users across 245 regions and hosts about 180 artist communities, including major acts like BTS. It also operates an e-commerce storefront, WeVerse Shop, which likely handled the affected purchase data.
The leak of payment methods, currencies, amounts, and timestamps could expose the spending habits of 422,584 fans, potentially enabling targeted phishing or social engineering if combined with other data. While card numbers and names were spared, this incident may erode trust in fan-centric platforms, making users hesitant to engage in direct artist interactions or e-commerce. This could ultimately impact the broader K-pop digital economy, where monetized fan engagement is a significant revenue driver.