Key Highlights:
- Bithumb, South Korea’s second-largest cryptocurrency exchange, experienced a cybersecurity breach targeting an internal mobile messaging and workplace system used by staff.
- No cryptocurrency holdings or user funds have been reported stolen, as the compromised workplace network operates independently from the main trading engine.
- South Korea’s Financial Supervisory Service is evaluating the incident alongside separate cyber breaches affecting Daishin Securities and Mirae Asset Global Investments.
Unauthorized Access Detected on Bithumb Workplace System
Bithumb, South Korea’s second-largest cryptocurrency exchange by trading volume, revealed on Wednesday that an external threat actor infiltrated an internal mobile network utilized by its workforce. The breached platform serves as an internal messaging and operational tool for exchange employees. During the unauthorized intrusion, an unspecified volume of personal information was compromised, though the platform has not yet clarified the full tally of impacted individuals.
The security incident came to light on Tuesday, prompting Bithumb to notify relevant domestic cybersecurity and data compliance authorities, including the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission. The exchange confirmed to local news agency Yonhap that forensic investigations remain underway as it works to determine the exact scope of the compromise, including the possibility of member information being involved.
Customer Assets Remain Secure Amid Regulatory Review
Despite the data exposure, Bithumb emphasized that user funds have not been compromised. As of Asian afternoon hours on Wednesday, no cryptocurrency assets were reported missing or stolen. The exchange clarified that the affected staff communication framework is completely segregated from the primary trading architecture, confirming that customer virtual assets cannot be accessed through this breach.
The company has not formally clarified if account deposits or fund withdrawals were temporarily disrupted by the incident.
The breach at Bithumb coincides with a wider wave of security investigations across South Korea’s broader financial and investment sector. South Korea’s Financial Supervisory Service (FSS) stated on Wednesday that it is currently evaluating cybersecurity incidents at three financial companies. Alongside Bithumb, major brokerage Daishin Securities reported an external cyberattack that compromised the personal and credit records of 38,490 clients. In a related development, Mirae Asset Global Investments disclosed that it detected and blocked abnormal access attempts aimed at several of its web systems, adding that its investor database remained unaffected.
Why This Matters
The incident highlights the ongoing vulnerability of administrative and internal infrastructure within the digital asset and financial sectors, even when core custodial and trading systems remain isolated. Regulators such as the Financial Supervisory Service, the Korea Internet & Security Agency, and the Personal Information Protection Commission are intensifying oversight across exchanges and traditional brokerages alike to assess vulnerabilities in employee communications platforms. For Bithumb and peer financial institutions, the regulatory reviews will likely examine access control policies and third-party operational software to prevent internal breach vectors from compromising wider customer databases.
Frequently Asked Questions
Were any cryptocurrency funds stolen in the Bithumb breach?
No. As of Asian afternoon hours on Wednesday, no digital asset losses have been reported. Bithumb stated that the internal mobile system targeted in the intrusion is isolated from the main trading system, meaning customer virtual assets could not be accessed.
What type of data was compromised during the incident?
Personal information was compromised via an internal mobile workplace and messaging tool used by employees. Bithumb has stated that it is actively investigating the incident to determine the exact reach of the attack, including whether customer data was swept up in the intrusion.
Which other South Korean financial firms were targeted?
South Korea’s Financial Supervisory Service is currently reviewing Bithumb alongside Daishin Securities, which saw the credit and personal data of 38,490 customers leaked, and Mirae Asset Global Investments, which thwarted abnormal access attempts against parts of its web infrastructure without exposing investor data.
