MapleStory Universe Suffers Hack, User Data Partially Compromised

ChainCatcher report: The chain game project MapleStory Universe (MSU) posted on X that, as of November 12, 2026, at 12:43 Beijing Time, all services were placed under maintenance due to the discovery of unauthorized external access to part of its off-chain server infrastructure. Preliminary investigations indicate that the blockchain and smart contracts were unaffected; on-chain records and wallets show no assets were transferred or stolen, and user wallet private keys were never uploaded to the MSU system. The attacker gained access to records of certain users from 07:26 on November 5 onward, including wallet addresses, usernames, avatars, login histories, partial email addresses, linked social media accounts, OpenAPI usage records, and transaction and service activity logs—but not real names, phone numbers, physical addresses, KYC data, or payment card information. Additionally, information registered by 328 applications in the Builder Center was accessed; however, the exposed API keys cannot compromise assets. MSU has severed the attack vector, revoked compromised credentials, and replaced affected servers, and will rotate all operational keys prior to restoring services.