Incident record
위버스컴퍼니
Weverse Company (HYBE) · Other
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
422,584 account IDs
Disclosure recorded
2026-09-06
Sector
Other
Practical risk
Critical
What this means
A practical reading of this record
The public record supports a critical practical risk level based on the currently reported scope and data categories. This can change if the organisation or regulator updates the record.
- Change the password for this service through its official app or website. Change it anywhere you reused it.
- Review card or bank activity and contact the issuer through its official channel if anything looks unfamiliar.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
Confirmed by the organisation, a regulator, or a documented official decision.
Company disclosure corroborated by Korean reporting. The company said the affected items were internal identifiers and purchase metadata, and that direct identifiers such as names and contact details were not included.
Recorded source · Weverse Company disclosure and KISA incident report ↗
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2026-09-06
The most recent dated event currently documented on this page.
Confirmed
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
External vulnerability report
KISA informed Weverse Company that an outside researcher had reported a security vulnerability.
- 02
Reported to KISA
Following internal review, the company filed a breach report with KISA.
- 03
Public disclosure
CEO Yang Ju-il published a notice confirming exposure of 422,584 account IDs.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.