Bithumb, one of South Korea’s leading cryptocurrency exchanges, is currently grappling with the fallout from a data breach that was confirmed on October 27. An unauthorized intruder gained access to the exchange’s internal mobile system, leading to the exposure of employee information. The exchange is now working diligently to determine whether customer records were also compromised, although it has reported no stolen cryptocurrency assets at this time.
The compromised system, crucial for facilitating internal communications and daily operations, was promptly reported to the Korea Internet & Security Agency and the Personal Information Protection Commission following the breach. Bithumb clarified that the affected employee system operates separately from its trading platform, which limits the potential for access to customer crypto holdings. To date, there have been no reports of any stolen digital assets.
While Bithumb has not publicly identified the attacker or disclosed specific details regarding the number of affected individuals, the exchange is under pressure to ascertain the full extent of the breach. Investigators are working to determine which employee records were exposed and whether there were any disruptions to trading services, including deposits and withdrawals.
In a parallel incident, Daishin Securities reported that hackers managed to obtain personal and credit information of approximately 38,490 customers after unauthorized access to a server linked to online account openings was detected on October 17. Meanwhile, Mirae Asset Global Investments took precautionary measures by blocking suspicious access to its web systems, and it has confirmed that no investor information or personal credit records were compromised.
The ongoing investigations into these security breaches highlight a troubling trend across various financial institutions in South Korea. Authorities have not yet established any connections between the incidents, suggesting a broader concern regarding cybersecurity vulnerabilities. In a related case, a data breach involving Keystone exposed customer shipping and contact details, further raising alarms about the state of data security in the cryptocurrency sector.
In response to the recent breaches, South Korea’s Financial Supervisory Service has dispatched inspection teams to both Bithumb and Daishin Securities. Officials are conducting thorough reviews of the incidents and have indicated that their examinations may expand if they uncover any legal violations. Governor Lee Chan-jin emphasized the urgent need for financial firms to bolster their cybersecurity measures during an October 28 meeting with banking executives. He warned that the advancement of artificial intelligence could empower attackers to exploit security weaknesses.
The scrutiny on exchange security is not confined to South Korea. Recently, India’s CoinDCX disclosed a $16 million loss related to an outdated wallet system, although they assured customers that their balances remained secure. Bithumb itself faced a separate incident earlier this year in February, where a system error led to users being mistakenly credited with 620,000 Bitcoin instead of a planned cash reward, though the company managed to recover most of the erroneous credits.
As investigations continue, blockchain researchers are also keeping an eye on other exchange breaches, with recent tracking revealing $19 million in transfers linked to a previous breach at Bitget. Bithumb has not provided a timeline for when its review will conclude, but the outcome will be pivotal in determining whether customer information was indeed part of the exposed employee data.
