Bithumb Investigates Whether Breach Exposed Customer Data

Bithumb said it discovered a breach Tuesday, Oct. 27, after an unauthorized party accessed an internal employee mobile system and personal information leaked; the exchange is checking whether customer data was exposed.

The system is a mobile groupware platform employees use for work functions and communication. Bithumb notified South Korea’s Korea Internet & Security Agency (KISA) and Personal Information Protection Commission (PIPC) on Oct. 27.

Early findings point to employee information as the main data involved. Bithumb has not ruled out customer information being included, but it has not disclosed how many people may be affected or which data was involved.

The exchange also has not disclosed how the unauthorized party entered the system. Bithumb is continuing to assess the scope of the leak and the access method.

The case surfaced as South Korean authorities examine a wider series of cybersecurity incidents affecting financial-sector companies. Brokerage Daishin Securities and asset manager Mirae Asset Global Investments also reported separate security incidents on Oct. 28.