- Unauthorized access to an employee workplace system exposed personal information.
- Customer data involvement remains under investigation; no cryptocurrency losses were reported.
- Regulators are assessing incidents involving the exchange and two traditional financial firms.
Bithumb disclosed a personal information leak on Wednesday after detecting unauthorized access to its internal mobile workplace system on October 27. The South Korean crypto exchange is investigating whether customer records were among the exposed information. No cryptocurrency losses were reported in the initial coverage, while the company said its trading infrastructure operates separately from the breached system.
Bithumb investigates whether customer records were exposed
The affected groupware system supports employee communications and file sharing. According to local reporting, exposed information involved employees, subsidiaries and partner firms.
Customer details could also have appeared in shared messages or documents. That possibility explains why investigators are examining more than employee account information.
Bithumb reported the incident to the Korea Internet & Security Agency and the Personal Information Protection Commission. It has not publicly established the number of affected people or the precise method of entry.
An industry source told Yonhap that some customer information had leaked. However, the exchange’s stated position remained that the scope, including customer involvement, was under investigation.Â
The company said the compromised system runs separately from facilities handling cryptocurrency transactions. That distinction supports its asset-security explanation but does not resolve the privacy impact of stolen records.
The initial disclosure also did not establish whether deposits or withdrawals experienced disruption. No reported asset loss does not mean no potential harm from the data exposure.
Bithumb incident adds to scrutiny of financial-sector security
The Financial Supervisory Service is also assessing incidents at Daishin Securities and Mirae Asset Global Investments. Their disclosures concern separate systems and should not be treated as evidence of one coordinated attack.
Daishin reported exposure affecting 38,490 customers, including names, email addresses and mobile numbers. It said affected customers had been notified and promised compensation for resulting damage under applicable law.
Bithumb customers also face potential impersonation risks if their contact information was exposed. Responding to the disclosures, Changpeng Zhao warned about phishing, SIM swapping and social engineering.
He recommended separate email aliases for exchanges and hardware security keys or passkeys instead of SMS verification. He also advised users to request a number lock from their mobile carrier.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
