Bithumb Reports Data Breach Affecting 6,444 Customers and 715 Employees
South Korean cryptocurrency exchange Bithumb has disclosed a data breach involving personal information belonging to 6,444 customers and records associated with 715 employees and external personnel. The incident followed an unauthorized intrusion into the company's internal corporate groupware system, DaouOffice, that lasted approximately one hour on October 27, according to information reported by Wu Blockchain.
The compromised customer records contained sensitive personal information, including names, mobile phone numbers, resident registration numbers, bank account numbers and copies of identification documents. Bithumb said that 5,600 records remained encrypted and unreadable, while data belonging to 844 customers was directly exposed.
Personal Information Exposed in Internal System Breach
The incident involved Bithumb's internal corporate groupware rather than its core cryptocurrency trading infrastructure. The exchange emphasized that DaouOffice is completely isolated from its core trading operations and asset databases, distinguishing the affected internal system from the infrastructure used to handle trading and customer assets.
Although the separation is significant to the company's assessment of the incident, the exposure of personal information presents a separate concern for affected customers. The disclosed data included several categories of sensitive information, ranging from contact details to financial account information and government identification records.
Of the 6,444 affected customer records, 5,600 remained encrypted and could not be read, according to the report. The information associated with the remaining 844 customers was directly exposed. The incident also involved records belonging to 715 employees and external personnel, extending the reported scope beyond customer information.
Bithumb Says Customer Funds Remain Secure
Bithumb stated that the compromised groupware system was completely separated from its core trading operations and asset databases. On that basis, the exchange emphasized that customer funds remained secure following the intrusion.
The distinction between a personal-data breach and a compromise of trading or asset systems is central to the exchange's disclosure. The reported incident concerned information stored in an internal corporate platform, while Bithumb said its core trading operations and asset databases were isolated from that environment.
However, the reported exposure of names, phone numbers, resident registration numbers, bank account details and identification documents means that the incident involved information that customers and personnel would reasonably expect an exchange to protect. The disclosure did not provide additional details about how the unauthorized party gained access to DaouOffice or whether the incident affected other systems.
Authorities Notified and Compensation Pledged
Bithumb said it had formally notified the relevant authorities following the breach. The company also pledged full compensation for any damages verified as resulting from the incident.
The compensation commitment is tied to markets verified damages, according to the disclosure. The report did not specify the amount of any potential compensation or provide further details about the process for assessing claims.
The breach was reported at South Korea's second-largest cryptocurrency exchange, making the protection of customer and employee information a central issue in the incident. While Bithumb maintained that customer funds remained secure because the affected groupware was isolated from its core trading and asset systems, the disclosed exposure of personal records remains the principal reported consequence of the October 27 intrusion.
Writer: Victoria HaleTechnology & Blockchain WriterVictoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.She prioritises clarity and accuracy when explaining technical developments to a general audience.
Check out other news and articles on Google News
Disclaimer:
The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.