Bithumb, South Korea’s second-largest cryptocurrency exchange, has suffered a security breach after an unauthorized outside party accessed its internal mobile groupware system. According to reports from the Yonhap News Agency, the intrusion has resulted in a leak of personal information, prompting immediate concern and regulatory scrutiny across the country’s financial sector.
The exchange is currently investigating the full scope of the breach to determine whether customer data was compromised. While formal assessments are ongoing, an industry source confirmed to Yonhap that some personal information belonging to Bithumb customers has indeed been leaked.
The incident at Bithumb was not isolated. It formed part of a coordinated wave of cyber intrusions that struck three major South Korean financial firms on Wednesday. Alongside the crypto exchange, brokerage firm Daishin Securities reported a data breach after detecting signs of unauthorized access the previous week. Daishin revealed that the personal information of 38,490 customers—including names, email addresses, and mobile phone numbers—had been exposed. The brokerage stated that it would compensate customers for any resulting damage in strict accordance with local laws.
Simultaneously, asset manager Mirae Asset Global Investments confirmed that it had also fallen victim to a hacking incident. In response to the simultaneous breaches, South Korean financial authorities have initiated formal inspections of the affected companies. Spokespeople for Bithumb, Daishin, and Mirae Asset could not be immediately reached for comment by Reuters.
These latest events compound a troubled cybersecurity landscape in South Korea. Earlier this month, the Financial Services Commission reported that a prior wave of hacking attacks had targeted 16 South Korean financial institutions, including major traditional banks, resulting in approximately 100,000 data leaks.
The South Korean security incidents coincided with a high-profile data breach in the United States. On the same day, cryptocurrency exchange Coinbase disclosed that a security incident at its analytics vendor, Amplitude, had exposed contact data belonging to some of its customers, though the company emphasized that user funds remained entirely unaffected.
Highlighting the interconnected nature of modern digital infrastructure, Binance founder Changpeng "CZ" Zhao quickly took to social media to highlight all four incidents. In a post on Wednesday, Zhao warned the global crypto community that leaked exchange and institutional data "is mostly used for phishing, SIM swapping, and social engineering."
"You can’t prevent a leak, but you can protect yourself," Zhao wrote, urging digital asset users to take proactive security measures. He advised individuals to sign up for each exchange using a unique email alias, avoid relying on text message-based two-factor authentication, and contact their mobile phone carriers to place a security lock on their numbers. Zhao added that leaked physical addresses and digital asset holdings data often lead to severe real-world consequences, including extortion and physical robberies.
Meanwhile, technical authorities in South Korea are grappling with broader vulnerabilities. The nation’s Science Ministry and the Korea Internet & Security Agency have strongly urged website operators to scan for and patch recently disclosed flaws in PHP, the foundational programming language driving a vast majority of the web. These vulnerabilities can potentially allow malicious actors to execute arbitrary commands on a server without requiring administrative login credentials. Bithumb has not yet disclosed the specific vector or technical method by which its internal systems were initially accessed.
Bithumb’s Turbulent Year
The unauthorized access to Bithumb’s mobile groupware system marks merely the latest in a relentless series of high-profile challenges for the South Korean exchange throughout 2026.
The year began with a dramatic operational error in February, when Bithumb accidentally credited 695 users with a staggering total of 620,000 Bitcoin during a routine marketing promotion intended to distribute minor cash rewards. At the time of the incident, the erroneous distribution was valued at approximately $43 billion. Because the deposits existed exclusively on Bithumb’s internal ledger and were never broadcast to the broader blockchain network, the exchange managed to recover 99.7% of the misplaced digital assets.
Regulatory pressures quickly followed. In March, South Korea’s Financial Intelligence Unit slammed Bithumb with a 36.8 billion won—equivalent to roughly $24.6 million—fine and ordered a six-month partial business suspension due to alleged anti-money laundering compliance failures. However, Bithumb successfully contested the penalty in court, and a Seoul tribunal blocked the enforcement of the business suspension in April.
Despite these operational hurdles, Bithumb has continued to pursue ambitious corporate milestones. The exchange subsequently outlined a comprehensive three-stage strategic plan aimed at achieving an Initial Public Offering on the South Korean stock market by 2028. At the same time, leadership stability has faced questions; in June, Bithumb CEO Lee Jae-won was booked as a bribery suspect by investigators looking into the alleged illicit hiring of a National Assembly member’s son.
Comments (0)