Binance (@binance) co-founder Changpeng Zhao (@cz_binance) has flagged four reported data leaks in a single day, involving Coinbase (@coinbase) vendor Amplitude, Bithumb (@BithumbOfficial), M
Binance (@binance) co-founder Changpeng Zhao (@cz_binance) has flagged four reported data leaks in a single day, involving Coinbase (@coinbase) vendor Amplitude, Bithumb (@BithumbOfficial), Mirae Asset and Daishin Securities. He used the reports to urge users to tighten their account security.
Coinbase said that an incident at analytics vendor Amplitude exposed some customers' contact data, but it found no evidence of unauthorized access to its own systems. The incident affected a "small subset" of Coinbase customers, along with other Amplitude clients, and customer funds were not affected. Claims that more than 70,000 users were exposed remain unconfirmed by the company, and the statement did not identify the exact number of affected users or which contact fields were exposed.
In South Korea, three financial firms reported data breaches on Wednesday, according to Yonhap News Agency, as relayed by Reuters. Daishin Securities said personal and credit information belonging to 38,490 customers had been leaked.The brokerage said it detected signs of unauthorized access on Oct. 17 to a server linked to online securities account openings.
At Bithumb, abnormal access by an outside party to its internal mobile groupware system led to a personal data leak, mainly involving employee information so far. The exchange is reviewing system records to find out whether customer information was also exposed. At Mirae Asset Global Investments, information related to some internal work systems was leaked, but no leak of personal credit information or financial loss has been confirmed so far.
The incidents come after a wave of hacking attacks at 16 South Korean financial firms, including banks, causing around 100,000 cases of data leaks, according to the Financial Services Commission earlier this month. South Korean police have also launched a pre-indictment investigation into the hacks at Daishin Securities, Mirae Asset Global Investments and Bithumb.
Even when funds remain untouched, exposed contact details can help criminals target account holders. Leaked personal information can enable phishing, SIM swapping and targeted scams, particularly when attackers use real details to make messages look credible.
CZ recommends several steps to limit the risk:
Use hardware security keys or passkeys, create unique email aliases for each service, and enable withdrawal address whitelisting. He also advises users to avoid SMS two-factor authentication in favour of stronger methods, and to be wary of phishing attempts that exploit leaked personal details.
The Coinbase case is a reminder that user data can leak through third-party providers rather than an exchange's own systems. Users cannot control a vendor's security, but they can reduce the damage a leak causes by hardening their own accounts.
Cointelegraph: Coinbase denies systems breach, says vendor exposed customer data
The Korea Times: Bithumb, Mirae Asset, Daishin join growing list of cyberattack victims
