Weverse Breach Impacts 422K Accounts; Company Pledges Security Overhaul
Weverse disclosed a security incident on Sept. 3–6, 2026 affecting 422,584 account IDs. The leaked data includes an internal user identifier and some purchase metadata (not directly identifying details like names). The company has strengthened API access controls, filed a breach report with Korea Internet & Security Agency (KISA), and said it will notify affected users, investigate all exposed APIs, pursue legal action, and tighten security measures to prevent recurrence.