The virtual asset exchange Bithumb has confirmed that hundreds of customer data records were leaked following a hacking attack on its internal mobile system. Initially, it was believed that only employee information had been compromised, but further investigation revealed the extent of the breach included customer data.
On October 29, industry sources reported that Bithumb confirmed the leak of customer information while investigating the breach of its internal mobile groupware that occurred on October 27. The scale of the leak is said to involve hundreds of records, with details on the exact number of affected individuals and the types of leaked information to be announced later.
The incident is believed to have occurred when an unauthorized external party gained access to the mobile groupware used by Bithumb employees. The targeted system is 'Daou Office,' a collaboration solution developed by Daou Technology. Although this system is separate from the platform where customers trade virtual assets, there are concerns that customer data may have been included in messages or attachments exchanged among employees.
Immediately after recognizing the breach on October 27, Bithumb reported the leak of employee information to financial authorities, the Korea Internet & Security Agency (KISA), and the Personal Information Protection Commission. At that time, the possibility of customer data being compromised had not been confirmed, and the investigation focused on messenger conversations and attachments within the groupware.
As the investigation progressed and customer data leaks were confirmed, the scope of the breach expanded beyond just employee information to include customers.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.