From Decrypt · By Decrypt Agent
In brief
South Korean crypto exchange Bithumb said an outside party accessed its internal mobile groupware system and leaked personal information.
The exchange is investigating whether customer data was among the information exposed, though an industry source told Yonhap some had leaked.
Brokerage Daishin Securities and asset manager Mirae Asset Global Investments also reported breaches, as authorities inspect the incidents.
Bithumb, South Korea's second-largest crypto exchange, said an unauthorized outside party had accessed its internal mobile groupware system, resulting in a leak of personal information, according to Yonhap News Agency.
The exchange is investigating whether customer data was compromised, Reuters reported, citing Yonhap. An industry source told Yonhap that some personal information belonging to Bithumb customers had been leaked.
Bithumb was one of three South Korean financial firms to report data breaches on Wednesday, local time. Brokerage Daishin Securities said the personal information of 38,490 customers, including names, email addresses and mobile phone numbers, was leaked after it detected signs of unauthorized access last week. It said it would compensate customers for any resulting damage in accordance with the law.
Myriad: How much gold to buy 1 BTC next? Click to make your prediction.
Asset manager Mirae Asset Global Investments also confirmed a hacking incident, and financial authorities have begun an inspection.
Spokespeople for the three firms could not be immediately reached for comment by Reuters. The breaches follow a wave of hacking attacks on 16 South Korean financial firms, including banks, that had caused around 100,000 data leaks, the Financial Services Commission said earlier this month, according to Reuters.
The Korean breaches were reported the same day Coinbase said a security incident at analytics vendor Amplitude had exposed some of its customers' contact data. Binance founder Changpeng "CZ" Zhao listed all four incidents in a tweet on Wednesday, warning that leaked exchange data "is mostly used for phishing, SIM swapping, and social engineering."
4 data leaks reported today:
1. Coinbase's vendor Amplitude exposed some users’ contact data (funds unaffected). 2. Bithumb (Korea) had user data leaks.
In TradFi, two securities firms in Korea leaked data: 3. Mirae Asset 4. Daishin Securities
You can't prevent a leak, but…
— CZ 🔶 BNB (@cz_binance) October 28, 2026
"You can't prevent a leak, but you can protect yourself," Zhao wrote, urging users to sign up to each exchange with a unique email alias, avoid text message-based two-factor authentication and ask their phone carrier for a number lock. Leaked addresses and holdings data "have led to real-world extortion and robberies," he added.