- Bithumb discovered on Oct. 27, 2026, that attackers had infiltrated an internal mobile system used for work and employee messaging.
- Preliminary information indicates that employees’ personal information was leaked, while Bithumb is investigating whether customer data was accessible.
- The exchange said the affected system is separate from its trading infrastructure, and no cryptocurrency theft has been reported.
South Korean cryptocurrency exchange Bithumb discovered on Oct. 27, 2026, that attackers had infiltrated an internal mobile system used for work and employee messaging. Preliminary information indicates that employees’ personal information was leaked, though the company is still assessing the scope of the compromise and whether the attackers could have accessed customer data.
Yonhap reported the incident, citing representatives of the trading platform. Bithumb has not disclosed how the attackers gained access, how many people were affected or what information was compromised.
Trading infrastructure unaffected, Bithumb says
Bithumb representatives said the compromised mobile system operates separately from the exchange’s core trading infrastructure. According to CoinDesk, the company said:
“This hack cannot be used to access customers’ virtual assets.”
No stolen cryptocurrency had been reported as of publication. It remained unclear whether the incident affected deposit or withdrawal operations.
After discovering the attack, Bithumb notified the Korea Internet and Security Agency and the Personal Information Protection Commission. Specialists continue to investigate the circumstances of the breach.
Other South Korean financial institutions targeted
The incident occurred amid a series of cyberattacks targeting South Korean financial institutions. The Financial Supervisory Service is reviewing incidents involving Daishin Securities and Mirae Asset Global Investments.
Daishin Securities reported a leak of personal and credit information affecting 38,490 customers. Mirae Asset Global Investments detected suspicious activity in some web systems but said investor information was not affected.
FSS chief Lee Chang Jin said several major financial institutions were hit by cyberattacks on Oct. 27. The regulator had previously found that similar incidents affected 16 companies in the country as of Oct. 14.
Earlier Bithumb control failure
The attack follows an incident in February 2026 in which Bithumb mistakenly credited users with more than 620,000 BTC instead of the intended cash rewards. South Korea’s regulator subsequently began an inspection of the exchange.
Source: Incrypted
