South Korean cryptocurrency exchange Bithumb is investigating a data leak resulting from a breach of its internal mobile communication system. The company discovered the intrusion on Tuesday and immediately notified the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC). While the full scope of the attack remains under analysis, Bithumb stated that customer virtual assets are secure because the compromised internal work platform is separated from the virtual asset trading system.
The exchange acknowledged the possibility that member information may have been involved in the leak but emphasized that no official announcement regarding specific user data exposure had been made at the time of reporting. This incident occurs amidst a broader surge in cyberattacks targeting South Korea’s financial sector. During a meeting at the Financial Supervisory Authority headquarters on Wednesday, Governor Lee Chan-jin reported that 16 South Korean financial firms had been hit by cyberattacks as of October 14.
Other major institutions have also faced recent security breaches. Daishin Securities disclosed that personal and credit information belonging to 38,490 customers was leaked. Additionally, asset manager Mirae Asset Global Investments confirmed it blocked abnormal external access to some web systems and is currently investigating the incident, stating that investor information was not affected.
Bithumb’s disclosure highlights the persistent vulnerability of internal corporate infrastructure within the crypto exchange sector, even when core trading systems are logically segregated. The immediate notification to regulatory bodies like KISA and PIPC suggests a compliance-focused response, yet the uncertainty surrounding member data leaks poses significant reputational risk. If personal information is confirmed to be exposed, the exchange could face stringent penalties under South Korea’s strict privacy laws, potentially impacting its planned IPO trajectory.
The broader context of 16 financial firms being targeted underscores a systemic threat to South Korea’s financial stability rather than an isolated incident. For institutional investors and users, the distinction between internal communication tools and asset custody systems is critical; while Bithumb asserts asset safety, the erosion of trust in operational security can drive liquidity away from exchanges perceived as vulnerable. The simultaneous breaches at Daishin Securities and Mirae Asset indicate that attackers are actively probing multiple vectors across traditional and digital finance sectors.
