Bithumb Reports Internal System Breach, Customer Personal Data Leak Under Investigation

The Truth Behind the Bithumb Internal System Breach and Personal Data Leak

Bithumb, the second-largest cryptocurrency exchange in South Korea, has reported that an external third party gained unauthorized access to its internal mobile groupware system, resulting in a leak of personal information.

The company immediately reported the incident to KISA (Korea Internet & Security Agency) and the Personal Information Protection Commission. They are currently investigating the extent of the impact, including whether member information (such as KYC data) was included in the leaked data.

It is important to note that the business system is clearly separated from the cryptocurrency trading platform, and as of now, there is no confirmed direct impact or damage to customers' cryptocurrency or deposited funds.

The Rising Threat of Cyber Attacks Across the Financial Sector

This incident is not limited to Bithumb alone but is part of a broader wave of cyber attacks affecting the entire South Korean financial industry.

Daishin Securities has reported a leak of customer information and credit information for 38,490 individuals, while similar unauthorized access has been discovered at major financial institutions such as Mirae Asset Global Investments and Mirae Asset Life Insurance.

According to the Financial Supervisory Service (FSS), more than 16 financial institutions in the country have been targeted in a short period, and authorities are working diligently to understand the situation and identify the causes.

Warnings About AI Misuse Risks and IT Security Reinforcement Directives from Authorities

In response to the series of breaches, Lee Chan-jin, the head of the Financial Supervisory Service, held a meeting with executives from financial holding companies, strongly urging a restructuring of security systems across the industry. He warned that attackers are increasingly able to exploit AI (artificial intelligence) to easily identify system vulnerabilities and execute simultaneous attacks.

To protect customer assets and personal information, as well as to restore trust in the financial system, boards of directors at various institutions are being asked to strengthen IT security capabilities as a core function.

Recurring Scandals at Bithumb and Defensive Measures Users Should Take

Since the beginning of 2026, Bithumb has faced ongoing issues with its systems and operations. In February, a mishap during a campaign led to the accidental allocation of 620,000 BTC to user accounts due to configuration errors, and in March, the company was fined for deficiencies in anti-money laundering measures, exposing flaws in internal controls.

The leaked data poses a high risk of being exploited for phishing scams, SIM swaps, and social engineering. Users are advised not to easily trust notifications from sources other than the official app and to implement individual email addresses and strong two-factor authentication as part of their self-defense measures.