Bithumb Updates on Hack Incident Follow-up: Information of 6,444 Users Stolen, Majority of User Data Encrypted
October 29 - South Korean crypto trading platform Bithumb has issued an announcement updating the follow-up on the hacking incident. Bithumb stated that on October 27, unauthorized external personnel breached the company's internal mobile office system (Daou Office), resulting in the leakage of some personal information. This system is completely separate from exchange accounts and asset information, and no direct intrusion into the trading system or customer database has been found so far. The company has strengthened real-time monitoring of abnormal transactions and withdrawals.
Bithumb disclosed that the current scale of the leak involves 6,444 individuals (of which 5,600 people's information is encrypted and unreadable, with 844 people's information actually readable and leaked); additionally, the information of 715 employees/partner personnel was leaked. The stolen data of the affected individuals includes names, mobile phone numbers, email addresses, resident registration numbers, driver's license numbers, bank account numbers, and copies of identification cards.
Bithumb emphasized that it immediately blocked access, disabled the relevant systems, and completed incident reporting to the Korea Internet & Security Agency and the Personal Information Protection Commission.
Bithumb discovered on October 27 that its internal mobile office collaboration system had been abnormally accessed by unauthorized external parties, leading to personal information leakage. The company is currently analyzing the specific scope of the leak, including whether member information is involved.