South Korea’s second-largest crypto exchange, Bithumb, has confirmed a data leak after its internal employee mobile app was breached by hackers earlier this week. According to a report by Yonhap news agency on Wednesday, October 28, 2026, the compromised system was an in-house communication platform designed specifically for staff to coordinate and share work-related information.
Bithumb’s security team detected the intrusion on Tuesday and immediately reported the incident that same day to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC). The exchange’s management is currently conducting a thorough investigation to assess the scope of the attack, including checking for potential leaks of customer personal data before releasing an official statement to the public.
The primary concern in any crypto platform breach always comes down to one thing: the fate of user funds.
Trading Systems Separated from Employee App
Bithumb management moved quickly to provide clear clarification regarding their system security boundaries. The employees’ internal operational platform is confirmed to be fully isolated, both physically and logically, from the virtual asset trading system.
This infrastructure separation ensures that wallets and all customer crypto balances remain completely unaffected. The data path breached by hackers lies outside the reach of market transaction systems, keeping users’ digital assets secure and inaccessible to unauthorized parties.
Consecutive Cyberattacks Target South Korea’s Financial Sector
The breach at Bithumb adds to a growing series of cybersecurity incidents targeting South Korea’s financial industry. Regulatory data shows these threats have unfolded consecutively: Financial Supervisory Authority (FSA) Governor Lee Chan-jin revealed that 16 financial institutions in South Korea had been attacked by hackers as of October 14, 2026.
Two other prominent financial entities were among the latest victims in this wave of attacks. Daishin Securities reported a breach of 38,490 customer personal and credit records, while asset manager Mirae Asset Global Investments was also targeted in a cyber intrusion.
This data leak comes at a critical juncture for Bithumb. The crypto exchange is currently preparing for an initial public offering (IPO) in 2028, a corporate milestone that demands a complete overhaul of its internal control systems.
For customers, the guarantee that crypto balances remain untouched provides clear reassurance amid news of the hack. However, whether any personal identifying details were exposed to the hackers still hinges on the final results of the ongoing KISA and PIPC investigations.
Reported via Cointelegraph.
Also read: Attempt to Raise Fee Authorizes Bitcoin Theft Instead - Electrum Releases Patch Version 4.8.3
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
