New FM Exploit/Hack?

I've only exchanged boxes between my own accounts, but who knows whether that protects me from the "security risk".

Or whether that's the only hole at the moment

Hole? I think this sums up Nexon's general data protection.