TL;DR
- Data Breach: Bithumb confirmed that an external attacker accessed an internal employee communication system and obtained personal information.
- Ongoing Investigation: The exchange reported the incident to South Korean authorities and is reviewing the scope of the breach, including whether member information was affected and how much data may have been exposed.
- Renewed Scrutiny: The incident follows a major operational error in February and comes amid a wave of cyberattacks targeting South Korean financial firms.
South Korean crypto exchange Bithumb is investigating a data breach after an external attacker gained access to an internal mobile system used by employees for work-related communication. The incident, disclosed on Wednesday, involved unauthorized access to the company’s internal groupware platform, raising concerns about potential exposure of personal information. According to the exchange, no customer crypto assets were affected, and the compromised system operates independently from its trading infrastructure.
Bithumb Examines Scope of Employee System Breach
Bithumb said it discovered the intrusion on Tuesday and quickly reported the matter to both the Korea Internet & Security Agency and the Personal Information Protection Commission. The company stated that an outsider successfully entered the internal mobile platform used by employees to communicate and perform daily tasks. The exchange is now reviewing the full impact of the incident, including whether member information may have been compromised.
Although personal data was reportedly taken, Bithumb has not disclosed how many individuals could be affected. The company also has not provided details on whether any account-related services, including deposits or withdrawals, experienced disruptions during the incident. To reassure users, Bithumb emphasized that the breached system is separate from its cryptocurrency trading platform. As a result, customer virtual assets could not be accessed through the compromised environment.
Cybersecurity Concerns Spread Across South Korea’s Financial Sector
The incident emerged on the same day South Korean financial authorities revealed they were assessing multiple financial institutions following recent cyberattacks. Bithumb was among three companies under review. Daishin Securities reported that personal and credit information belonging to 38,490 customers was exposed in an external attack.
Meanwhile, Mirae Asset Global Investments said it detected and blocked abnormal access attempts targeting parts of its web infrastructure, adding that investor information was not impacted. Financial Supervisory Service Governor Lee Chan-jin said major financial investment firms had experienced hacking incidents. Earlier this month, he noted that cyberattacks had affected 16 South Korean financial firms as of Oct. 14, highlighting growing cybersecurity pressures across the sector.
Bithumb Faces Another Internal Control Challenge
The latest incident marks the second significant operational setback for Bithumb this year. In February, the exchange mistakenly credited users with 620,000 BTC instead of 620,000 won, creating an error valued at more than $40 billion at the time. Following that event, CEO Lee Jae-won acknowledged weaknesses in the company’s internal controls.
The new breach is likely to bring renewed attention to the safeguards and oversight measures Bithumb has in place as it works to determine the full extent of the cyberattack and any resulting data exposure. Bithumb now faces additional scrutiny as investigators continue their review, and Bithumb users await further updates regarding the incident.
