- Bithumb is looking into a reported security breach that affected its internal mobile groupware platform, though the full scope of the compromised data remains undetermined.
- South Korean regulators have been alerted as investigators determine whether any customer details were compromised.
South Korea‘s second-biggest cryptocurrency exchange, Bithumb, has verified a security incident affecting the mobile system utilized by its staff for daily work and communications. An unauthorized party managed to access the platform, resulting in a leak of personal data. The exchange is currently checking to see if customer records were compromised during the event.
According to reports from Korean media outlet SBS, Bithumb uncovered the breach on October 27 and promptly notified South Korea’s Personal Information Protection Commission and the Korea Internet & Security Agency (KISA) that same day.
Preliminary findings suggest that the leaked data largely pertains to workers. Even so, Bithumb has not dismissed the possibility that client information might have been leaked as well. The platform has not yet revealed the total number of individuals impacted, the exact categories of data compromised, or the vector the perpetrator used to breach the network.
Bithumb Probes Data Leak as Two Other South Korean Firms Report Breaches
The targeted platform is an internal mobile groupware tool that lets personnel handle work-related tasks. Bithumb is currently evaluating how far the leak reaches and how the unauthorized access occurred. The perpetrator’s identity has not been revealed to the public.
This security event coincides with a broader review by South Korean financial regulators into a wave of cybersecurity events impacting multiple organizations in the industry. Bithumb was one of three companies that reported data breaches on October 28, alongside asset manager Mirae Asset Global Investments and brokerage Daishin Securities.
Daishin Securities verified that credit and personal details for 38,490 clients were exposed. The affected details comprised mobile phone numbers, email addresses, and names. That specific count applies to Daishin Securities rather than Bithumb.
Additionally, Mirae Asset Global Investments disclosed unauthorized access targeting certain web systems. The firm noted that early evaluations showed no signs that retail investor details were leaked.
The Financial Supervisory Service of South Korea is reviewing these events while investigations by authorities into the reported breaches move forward.
For Bithumb, the key unanswered question is whether the breached internal platform held client information. The exchange has stated that it will release additional information as the review continues.
Frequently Asked Questions
What system was breached at Bithumb?
The security breach involved Bithumb’s internal mobile groupware system, which employees use for work and communication.
When was the security incident discovered and reported?
Bithumb found the breach on October 27 and reported it on the same day to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission.
Was customer data exposed in the Bithumb breach?
Initial findings indicate the leaked information mostly affects employees, but Bithumb has not ruled out the possibility that customer data was also exposed. The investigation is still ongoing.
Which other South Korean companies reported breaches around the same time?
On October 28, Daishin Securities and Mirae Asset Global Investments also reported security incidents alongside Bithumb.
