Key takeaways
- Bithumb is investigating a data leak from a hack of the internal mobile system its employees use.
- Bithumb does not rule out that member information is involved and promises an official announcement on the scope.
- Bithumb says its internal work system is separated from trading, so customer virtual assets cannot be accessed.
South Korean exchange Bithumb is investigating the extent of a data leak caused by a hack of its internal mobile system, the in-house platform its employees use to communicate and share work information, Yonhap News Agency reported. Bithumb has not ruled out that member information was involved and is still analyzing the exact scope of the leak. Until it does, members have only Bithumb's word that the breach stopped short of the virtual asset trading system.
Bithumb discovered the breach of its in-house mobile system and notified the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) the same day, according to Yonhap, which cited industry sources. Yonhap reported that the leak followed abnormal access by an unauthorized outsider to Bithumb's in-house mobile groupware system.
What Bithumb Told Yonhap
Bithumb told Yonhap:
"We are analyzing the exact scope, including the possibility of member information being involved. We will provide an official announcement this morning. However, the internal work system is separated from the virtual asset trading system, so customer virtual assets cannot be accessed through this breach."
That separation is Bithumb's own claim, and Bithumb has promised an official announcement on the exact scope. Bithumb has not disclosed how many members, if any, were affected or what personal information was exposed, and Cointelegraph reached out to Bithumb for further comment.
Other Korean Firms Report Attacks
Asset manager Mirae Asset Global Investments said it had blocked abnormal external access to some web systems, was investigating the incident and that investor information was not affected. Brokerage Daishin Securities said personal and credit information belonging to its customers had been leaked. Bithumb, unlike Daishin Securities, has not confirmed that any member information left its systems.
Why It Matters
Bithumb says customer virtual assets cannot be accessed through this breach because its internal work system is separated from the trading system, yet it has not ruled out that member information leaked from that same internal system. We think that split is the whole lesson for Bitcoin users: an exchange can wall off the coins it holds in custody, but your name, contact details and account history still sit in systems that attackers keep reaching across Korean finance. Custody risk and privacy risk are separate, and an exchange can only promise to manage one of them. Withdraw sats to self-custody, hand exchange gatekeepers as little personal data as possible, and treat any message that cites this leak as a phishing attempt.
