South Korea’s major cryptocurrency exchange Bithumb is actively investigating the full extent of a data leak resulting from a security breach of its internal mobile system earlier this week, according to reports from the Yonhap News Agency.
The incident, which was discovered by the exchange on Tuesday, has prompted immediate regulatory notifications and a comprehensive forensic review. Bithumb officials confirmed that the unauthorized access targeted an in-house mobile platform utilized primarily by employees for internal communication and corporate information sharing. Upon detecting the breach, the exchange moved quickly to inform key national regulatory bodies, reporting the incident directly to the Korea Internet & Security Agency and the Personal Information Protection Commission on the same day.
As security teams work around the clock to understand how the network was compromised, the central question driving the ongoing investigation is whether sensitive member data was exposed during the attack.
"We are analyzing the exact scope, including the possibility of member information being involved," Bithumb said in a statement provided to Yonhap News Agency. The company added that an official, comprehensive announcement detailing the findings of the preliminary investigation would be released to the public shortly.
Crucially, Bithumb sought to reassure its user base regarding the safety of their digital assets. The exchange emphasized that its internal administrative and work communication systems operate on a network entirely separate from its virtual asset trading infrastructure. Consequently, the company stated that customer virtual assets and trading wallets cannot be accessed, compromised, or impacted through this specific security breach. Cointelegraph reached out to Bithumb for further commentary on the developing situation.
This unsettling cyber incident does not happen in a vacuum, arriving instead amid a broader, mounting wave of cyberattacks targeting South Korea’s financial and corporate sectors. Regulatory authorities are already on high alert as digital threats multiply across the country’s economic landscape.
Just a day after the breach was uncovered, Financial Supervisory Service Governor Lee Chan-jin addressed the escalating crisis during a high-level meeting held at the agency’s headquarters on Wednesday. Governor Lee revealed to officials that a total of 16 South Korean financial firms had fallen victim to various cyberattacks as of October 14, highlighting a systemic vulnerability that has alarmed both regulators and industry leaders alike.
The widening scope of these cyber intrusions has impacted several high-profile financial institutions across the nation. According to reports from The Korea Times, prominent asset manager Mirae Asset Global Investments and major financial institution Daishin Securities are among the most recent high-profile victims of digital breaches in the country.
The impact varies significantly among the targeted organizations. Daishin Securities disclosed that the security compromise resulted in the unauthorized leak of personal and credit information belonging to 38,490 of its customers, dealing a blow to client data privacy and forcing the firm to manage the fallout of exposed sensitive records.
Meanwhile, Mirae Asset Global Investments reported a different operational outcome following its own security scare. The asset management firm announced that it had successfully detected and blocked abnormal external access directed at some of its web systems. While the intrusion attempt triggered an immediate internal investigation, the company clarified that investor information remained completely unaffected and secure throughout the episode.
The timing of Bithumb’s security breach also intersects with a critical strategic transitional period for the exchange. The platform has been actively preparing for a major structural overhaul, having recently established a 2028 timetable for an initial public offering alongside rigorous internal control enhancements designed to strengthen its corporate governance and operational resilience. As South Korean regulators tighten scrutiny on digital asset platforms and traditional financial institutions alike, the latest wave of cyberattacks underscores the escalating urgency for robust cybersecurity infrastructure across the nation’s entire financial ecosystem.
Comments (0)