Bithumb confirmed that an unauthorized outside party accessed the mobile groupware its staff use, exposing employee personal information. The exchange says no crypto has been lost, while regulators check whether customer data was reached. The breach comes as hacks hit at least 20 South Korean financial institutions.
Bithumb, one of South Korea's two largest cryptocurrency exchanges, confirmed on October 28 that an unauthorized outside party had broken into the mobile groupware its staff use for internal messaging and administrative work. The exchange says its trading and custody systems run on separate infrastructure and that no crypto has been lost. Regulators are still checking whether customer data was reached.
What the intruders reached
Bithumb detected the intrusion on October 27 and reported it the following day to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC). According to the Financial Services Commission (FSC), the potentially exposed records belong to employees of Bithumb, its subsidiaries and its partner companies. A Bithumb spokesperson said investigators have found no exposure of wallet addresses.
The exchange has not disclosed how many people are affected, how the attackers got in or who they might be. Employee records still carry risk: names, phone numbers and internal roles can help an attacker run phishing aimed at colleagues with privileged access, though none of that has been reported in this case.
A wave of attacks across Korean finance
Bithumb was one of three financial companies that disclosed incidents on October 28. Daishin spotted unauthorized activity on October 17. Shinhan Bank needed about 15 and a half hours to identify an attack that began on September 28.
On October 21, financial authorities warned institutions about roughly 4.4 million scanning attempts from IP ranges allocated to North Korea. Officials say they have found no verified link between those addresses and Bithumb.
Regulators eye bank-grade rules
The FSC, the Financial Supervisory Service and the Financial Security Institute launched on-site investigations at Bithumb. The FSC plans tougher cybersecurity duties for crypto businesses and other firms outside the Electronic Financial Transactions Act, but it has described these as plans and no new requirement is in force yet.
The incident follows Bithumb's February error, when it mistakenly credited users with roughly 620,000 BTC. The two incidents have different causes and no known technical link.
Source: Crypto News Flash
Trading involves risk.
Risk Disclaimer
