Bithumb Says Hackers Accessed Internal System, Leaking Personal Data

Bithumb, South Korea’s second-largest crypto alternate, mentioned an unauthorized outdoors get together had accessed its inner cell groupware system, leading to a leak of non-public data, based on Yonhap Information Company.

The alternate is investigating whether or not buyer knowledge was compromised, Reuters reported, citing Yonhap. An trade supply informed Yonhap that some private data belonging to Bithumb clients had been leaked.

Bithumb was considered one of three South Korean monetary companies to report knowledge breaches on Wednesday, native time. Brokerage Daishin Securities mentioned the non-public data of 38,490 clients, together with names, e-mail addresses and cell phone numbers, was leaked after it detected indicators of unauthorized entry final week. It mentioned it might compensate clients for any ensuing harm in accordance with the legislation.

Asset supervisor Mirae Asset World Investments additionally confirmed a hacking incident, and monetary authorities have begun an inspection.

Spokespeople for the three companies couldn’t be instantly reached for remark by Reuters. The breaches observe a wave of hacking assaults on 16 South Korean monetary companies, together with banks, that had brought about round 100,000 knowledge leaks, the Monetary Companies Fee mentioned earlier this month, based on Reuters.

The Korean breaches had been reported the identical day Coinbase mentioned a safety incident at analytics vendor Amplitude had uncovered a few of its clients’ contact knowledge. Binance founder Changpeng “CZ” Zhao listed all 4 incidents in a tweet on Wednesday, warning that leaked alternate knowledge “is generally used for phishing, SIM swapping, and social engineering.”

“You may’t forestall a leak, however you possibly can defend your self,” Zhao wrote, urging customers to enroll to every alternate with a singular e-mail alias, keep away from textual content message-based two-factor authentication and ask their telephone provider for a quantity lock. Leaked addresses and holdings knowledge “have led to real-world extortion and robberies,” he added.

Individually, South Korea’s Science Ministry and the Korea Web & Safety Company have urged web site operators to examine for not too long ago disclosed flaws in PHP, the programming language behind a lot of the online, which let attackers run instructions on a server with out logging in. Bithumb has not mentioned how its system was accessed.

Bithumb’s turbulent yr

The breach is the most recent setback for Bithumb in 2026. In February, the alternate mistakenly credited 695 customers with a complete of 620,000 BTC, price about $43 billion on the time, throughout a promotion meant at hand out small money rewards. The deposits existed solely on Bithumb’s inner ledger, and the alternate mentioned it recovered 99.7% of the Bitcoin.

In March, South Korea’s Monetary Intelligence Unit fined Bithumb 36.8 billion gained ($24.6 million) and ordered a six-month partial suspension over anti-money laundering failures, however a Seoul court docket blocked the suspension in April.

Bithumb has since set out a three-stage plan to checklist on the inventory market in 2028, whereas its CEO, Lee Jae-won, was booked as a bribery suspect in June over the alleged hiring of a Nationwide Meeting member’s son.