• Home
• Bithumb and Coinbase Associated Systems Suffer Security Breaches

Bithumb and Coinbase Associated Systems Suffer Security Breaches

Hackers Target Bithumb and Associated Coinbase Systems – Regulators Warn of Escalating Data Risks

Key Takeaways

• An outsider breached Bithumb’s internal mobile groupware on October 28, prompting an ongoing investigation into potential customer data theft.
• A security incident at third-party analytics provider Amplitude exposed the contact information of over 70,000 Coinbase users.
• South Korean brokerage Daishin Securities reported a leak of personal and credit information affecting 38,490 customers.
• The Financial Supervisory Service (FSS) warns that hackers are increasingly using artificial intelligence to detect vulnerabilities and launch simultaneous attacks.

Internal Communication Platform Compromised at Bithumb

On October 28, an outsider gained unauthorized access to the internal mobile groupware system at Bithumb, South Korea’s second-largest cryptocurrency exchange. Employees rely on this specific network for internal communication and daily work-related activities. The breach reportedly resulted in the theft of personal information from the platform. Exchange officials are currently investigating whether any customer data was exposed during the intrusion.

The compromised communication system operates entirely separate from the main trading platform. This critical separation ensured that external attackers could not gain direct access to customer cryptocurrency assets stored on the exchange. No digital asset losses or unauthorized transfers have been reported following the initial discovery of the incident.

This security event follows a significant internal control failure at the exchange earlier this year. A system error in February mistakenly credited users with 620,000 Bitcoin instead of 620,000 Korean won. While the October breach does not involve missing funds, it places renewed focus on the internal safeguards governing the platform.

Third-Party Vulnerability Exposes Coinbase User Data

Security concerns also emerged for users of Coinbase after attackers accessed contact information belonging to more than 70,000 individuals. The cryptocurrency exchange clarified that its own internal infrastructure remained secure and untouched by malicious actors. The breach actually occurred at Amplitude, a third-party analytics provider utilized by the exchange for operational insights.

The incident at Amplitude directly led to the external exposure of the contact details for these specific users. Security teams quickly confirmed that no unauthorized access took place within the primary exchange environment. Customer funds remained completely isolated from the external analytics platform and were entirely unaffected by the third-party data exposure.

South Korean Financial Institutions Face Broad Attacks

The incidents in the cryptocurrency sector occurred alongside a broader wave of attacks targeting traditional financial institutions. Brokerage firm Daishin Securities disclosed an external attack that leaked personal and credit information belonging to 38,490 customers. The company implemented emergency security measures immediately following the discovery of the breach to contain further damage.

Asset manager Mirae Asset Global Investments also experienced security threats during the same 12-hour window. Security systems at the firm successfully detected and blocked abnormal access attempts targeting specific web infrastructure. Investor information at Mirae Asset remained secure and unaffected by the intrusion attempts.

The varying outcomes of these attacks require each targeted firm to conduct individual assessments. Investigators must determine exactly what access attackers achieved and accurately identify whose personal information requires protection measures. The Financial Supervisory Service (FSS) initiated an immediate evaluation of the incidents and deployed an on-site inspection team directly to Daishin Securities.

Regulators Highlight Artificial Intelligence Threats

Financial authorities reported earlier in October that attacks had already affected 16 financial firms, including major banks. These ongoing security incidents have resulted in approximately 100,000 cases of data leaks being reported across the financial sector. FSS Governor Lee Chan-jin addressed the growing scale of these breaches, pointing to technological shifts in how attackers currently operate.

Governor Lee warned that hackers are now utilizing artificial intelligence as a primary tool to easily detect security vulnerabilities across networks. This technological shift allows malicious actors to launch simultaneous attacks against multiple targets, a tactic expected to become highly commonplace. He urged corporate boards of directors to take the lead in upgrading their IT security capabilities to protect customer assets and maintain overall financial trust.

The security warnings coincide with a stricter regulatory environment for digital asset trading in the region. South Korean authorities recently blocked access to 27 unregistered cryptocurrency exchange websites. Targeted platforms included KuCoin, MEXC, and BingX, following similar restrictions previously placed on their mobile applications.

Our Assessment

The recent string of attacks demonstrates the complex security challenges facing both cryptocurrency exchanges and traditional financial institutions. The successful breaches at Bithumb and Daishin Securities highlight persistent vulnerabilities in internal communication tools and external interfaces. The Coinbase incident specifically illustrates the growing risk associated with third-party service providers, showing that data can be compromised even when a primary platform remains highly secure.

Regulatory responses indicate a clear recognition that the operational threat landscape is evolving rapidly. Warnings from the FSS regarding artificial intelligence suggest that automated, simultaneous attacks will require institutions to implement far more robust monitoring systems. The ongoing crackdown on unregistered exchanges combined with increased scrutiny of IT security practices shows a concerted effort to tighten oversight across the entire financial technology sector.