Hackers broke into Bithumb through the app its own employees use to chat, not through its trading platform, and walked away with personal information. That detail is what should worry traders, because the exchange still cannot say whose data was taken, or how many people are affected.
Key points:
- Bithumb found the breach on Tuesday in its internal employee mobile system. Personal information was stolen, but no crypto funds were reported lost.
- The staff system runs separately from trading, so Bithumb says customer crypto cannot be reached through this breach. The scope, including whether member information was involved, is still being analyzed.
- The attack is part of a wider wave: South Korea's financial regulator was assessing three firms on Wednesday, and cyberattacks had already hit 16 Korean financial firms as of October 14.
Bithumb, South Korea's second-largest crypto exchange by trading volume, discovered the intrusion on Tuesday and reported it the same day to the Korea Internet & Security Agency and the Personal Information Protection Commission, according to Yonhap News Agency. Bithumb told Yonhap it was analyzing the exact scope, including the possibility of member information being involved, and that it would give an official announcement. It has not said whether deposits or withdrawals were disrupted, or how many people's data was exposed.
Read also: CoinDCX Confirms $16 Million Loss After Denying Breach — What Happens Next?
How wide is this attack wave?
The Bithumb breach did not land in isolation. On Wednesday, Financial Supervisory Service Governor Lee Chan-jin said major financial investment companies had faced hacking incidents, and the regulator was assessing three firms. Daishin Securities said personal and credit information for 38,490 of its customers had leaked in an outside attack, while Mirae Asset Global Investments said it blocked abnormal access to some of its web systems and that investor information was not affected.
This is also Bithumb's second internal-controls failure this year. In February, it mistakenly credited customers with 620,000 Bitcoin, worth more than $40 billion at the time, instead of 620,000 won. Chief Executive Lee Jae-won blamed weak internal controls at the time, saying the exchange was acutely aware of the deficiency. For traders, the next signals are plain: Bithumb's official announcement on scope, any regulator action, and any disclosure about deposit or withdrawal disruption.
I am not reassured by the "funds are safe" line here. Personal data is the part that cannot be clawed back once it leaks, and Bithumb has now had two internal-control failures in a single year. Until the exchange names what was taken and from whom, traders should treat this as an open trust question, not a closed incident.
Read also: Datavault AI Stock Crashes 50% — Can It Free Its Stuck Bitcoin?
— BitByLine News Desk
This post is news only, not financial advice. Always do your own research before buying or selling crypto.
Read our full Disclaimer.
Sources: CoinDesk, Cointelegraph