Bithumb has reported a data breach involving unauthorized access to its internal system, potentially exposing customer information.
Bithumb Suffers Data Breach
Bithumb, the second-largest cryptocurrency exchange in South Korea, has confirmed that unauthorized access to its internal mobile groupware system resulted in a leak of personal information. The exchange is currently investigating the extent of the breach, particularly whether customer data has been compromised.
According to industry sources, some personal information belonging to Bithumb customers has indeed been leaked. This incident is part of a broader wave of security issues affecting South Korean financial institutions, as Bithumb is one of three firms reporting data breaches on the same day.
Other Affected Firms
Brokerage Daishin Securities disclosed that the personal information of nearly 38,500 customers, including names, email addresses, and phone numbers, was exposed due to unauthorized access detected last week. The firm has committed to compensating affected customers in accordance with legal requirements. Similarly, asset management company Mirae Asset Global Investments has also reported a hacking incident, prompting investigations by financial authorities.
These breaches come in the wake of a significant uptick in hacking incidents targeting South Korean financial firms, which have collectively seen around 100,000 data leaks, as reported by the Financial Services Commission earlier this month. The recent incidents coincide with a security breach at analytics firm Amplitude, impacting users of Coinbase.
Industry Response
Changpeng Zhao, founder of Binance, highlighted the risks associated with data leaks, emphasizing that such information is often exploited for phishing and social engineering attacks. He recommended that users adopt unique email aliases for each exchange and enhance their security practices to mitigate risks associated with leaked data.
In response to the growing security concerns, South Korea's Science Ministry and the Korea Internet & Security Agency are advising website operators to address vulnerabilities in PHP, a widely used programming language that has been exploited by attackers.
Bithumb's Recent Challenges
This data breach adds to Bithumb's series of challenges in 2026, including a significant error in February when the exchange mistakenly credited 695 users with a total of 620,000 BTC, valued at approximately $43 billion. Although the exchange managed to recover most of the mistakenly credited Bitcoin, the incident raised further questions about its operational security.
Additionally, Bithumb faced a fine of 36.8 billion won ($24.6 million) from South Korea's Financial Intelligence Unit for anti-money laundering shortcomings, although a court later blocked the enforcement of a partial suspension against the exchange. Bithumb is currently working on a three-stage plan to go public by 2028, despite ongoing scrutiny and challenges.
