South Korean crypto exchange Coinone is telling customers to watch their inboxes and phones closely. An attacker broke into the servers of MetaM, the outside firm that handles Coinone’s customer support, and may have walked off with the details people shared while asking for help.

The exchange says its own systems held firm. But the data that may have leaked is the raw material for phishing and identity theft.