Bithumb is investigating a reported security breach involving its internal mobile groupware system, with the extent of the data leak still unclear. South Korean authorities have been notified
South Korea’s second-largest crypto exchange, Bithumb, has confirmed a security breach involving its internal mobile system, which employees use to work and communicate. Personal information was leaked after an unauthorized party gained access. The exchange is investigating whether customer information was exposed in the incident.
Bithumb discovered the breach on October 27 and reported it to South Korea’s Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission on the same day, according to Korean media SBS.
Initial findings indicate that the leaked information mainly concerns employees. However, Bithumb has not ruled out the possibility that customer data was also exposed. The exchange has yet to disclose the number of people affected, the specific information involved or how the attacker entered the system.
The compromised system is an internal mobile groupware platform used by employees to access work-related functions. Bithumb is examining the scope of the leak and the method used to gain unauthorized access. The identity of the attacker has not been publicly disclosed.
The breach comes as South Korean financial authorities examine a series of cybersecurity incidents affecting companies across the sector. Bithumb was among three firms reported to have experienced data breaches on October 28, alongside brokerage Daishin Securities and asset manager Mirae Asset Global Investments.
Daishin Securities confirmed that personal and credit information belonging to 38,490 customers had been leaked. The exposed information included names, email addresses and mobile phone numbers. That figure relates to Daishin Securities, not Bithumb.
Mirae Asset Global Investments also reported unauthorized access to some of its web systems. The company said its initial findings did not indicate that retail investor information had been exposed.
South Korea’s Financial Supervisory Service is assessing the incidents, while authorities continue to examine the reported breaches.
For Bithumb, the main outstanding question is whether the compromised internal system contained customer information. The exchange has said it will provide further details as its investigation progresses.
