Teollimi

Weverse (HYBE) data breach

Was I affected?

Weverse (HYBE) confirmed a breach involving up to 422,584 records (duplicates possible), exposing bank or financial details. You may be affected if you bought something or received a refund through Weverse or Weverse Shop and got a notice from Weverse in September 2026.

Weverse (HYBE) breach facts
AnnouncedSep 6, 2026
When it happenedReported to Weverse by KISA on September 3, 2026
CountrySouth Korea
Records exposed (may include duplicates)422,584
Data exposedBank or financial details and Other details
StatusConfirmed by the company or a regulator filing

What happened

Weverse Company, the HYBE subsidiary that runs the Weverse fan platform and Weverse Shop, said on September 6, 2026 that outsiders used a security flaw in its service to obtain data tied to 422,584 account IDs; it has since tightened access to its payment information API. The exposed fields were transaction details such as payment method, payment gateway name, currency, purchase amount and time, and refund time, along with an internal identifier assigned at sign-up. Weverse says names and contact details were not included, card numbers and passwords were not listed among the exposed data, and the fields alone are unlikely to allow payment fraud. Korea's KISA alerted the company on September 3 after an outside researcher reported the flaw.

What should I do?

  1. Ignore emails, texts and DMs about Weverse refunds, payment problems or 'account verification' that ask you to log in through a link; open the Weverse app directly.
  2. Check your card or payment app history for Weverse charges you do not recognize.
  3. Turn on two-step verification for your Weverse account and the email address linked to it.
XRedditWhatsApp

Check the other services you use →

Sources