Community Trust ScoreVerified
South Korean cryptocurrency exchange Bithumb is investigating a data leak following a hack of its in-house mobile work system. The exchange discovered the breach on Tuesday and immediately notified the Korea Internet & Security Agency and the Personal Information Protection Commission on the same day.
Scope of the Breach
The compromised system is an internal platform used by Bithumb employees to communicate and share information at work. As of the latest reporting, it has not been confirmed whether customer information was actually exposed. Bithumb stated that it is analyzing the exact scope of the leak, including the possibility that member data was involved. The exchange promised to issue an official announcement on Wednesday morning regarding the findings of this analysis.
Bithumb emphasized that the internal work system is structurally separated from its virtual asset trading system. According to the exchange, this separation means that customer crypto holdings cannot be reached through this specific breach. While the company stated that customer assets are not accessible via the compromised internal tools, the full extent of the data exposure remains under review.
Wider Sector Attacks
The incident at Bithumb is part of a broader wave of cyberattacks targeting South Korea’s financial sector. Lee Chan-jin, Governor of the Financial Supervisory Authority, spoke at a meeting on Wednesday and stated that 16 South Korean financial firms had been targeted as of October 14. This figure includes recent incidents affecting major financial institutions beyond the cryptocurrency exchange sector.
Daishin Securities and Mirae Asset Global Investments have also been identified as recent victims of cyberattacks. Daishin Securities reported that personal and credit information belonging to 38,490 customers had leaked. Mirae Asset Global Investments stated that it blocked abnormal external access to some of its web systems and is currently investigating the incident. The company added that investor information was not affected by the access attempts.
Regulatory Response
Bithumb’s prompt notification to the Korea Internet & Security Agency and the Personal Information Protection Commission follows standard protocols for data breaches in South Korea. The Personal Information Protection Commission oversees the handling of personal data, while the Korea Internet & Security Agency focuses on cybersecurity incidents. Both agencies were informed on Tuesday, the same day the breach was discovered by Bithumb’s internal team.
The Financial Supervisory Authority’s statement regarding the 16 targeted firms highlights the scale of the cyber threats facing the region’s financial infrastructure. Lee Chan-jin’s remarks at the Wednesday meeting underscored the ongoing pressure on financial institutions to secure their digital environments against increasingly sophisticated attacks. The specific details of the attacks on the 16 firms, including Bithumb, are being assessed by respective regulatory and corporate teams.
Frequently Asked Questions
Did Bithumb confirm customer data was leaked?
No, it has not been confirmed whether customer information was actually exposed. Bithumb is currently analyzing the exact scope of the leak, including the possibility that member data was involved, and promised an official announcement on Wednesday morning.
Are customer crypto assets at risk from this breach?
Bithumb stated that the internal work system is separated from the virtual asset trading system, meaning customer crypto holdings cannot be reached through this breach.
