South Korean crypto exchange Bithumb said an unauthorized outside party accessed its internal mobile groupware system, leading to a leak of personal information, and is investigating whether customer data was affected; an industry source told Yonhap that some customer information had leaked. The same day, brokerage Daishin Securities reported that personal data of 38,490 customers, including names, email addresses and mobile phone numbers, was leaked, and asset manager Mirae Asset Global Investments confirmed a hacking incident, with financial authorities beginning inspections. The breaches follow attacks on 16 South Korean financial firms that caused around 100,000 data leaks, according to the Financial Services Commission. Bithumb has not said how its system was accessed.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Decrypt ↗
Keywords
cryptocybersecuritySouth Koreadata breach
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/27/2026 | 80,909.77 |
| Change that session | +0.95% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Bithumb discloses data leak after internal system breach: Report
South Korean crypto exchange Bithumb is investigating the extent of a data leak after hackers breached its in-house mobile system, which employees use for internal communication and work, earlier this week. Bithumb discovered the breach on Tuesday and notified the Korea Internet & Security Agency and the Personal Information Protection Commission the same day. The exchange said its internal work system is separated from its virtual asset trading system, so customer virtual assets could not be accessed through this breach, while it was still checking whether member data was involved. The incident is part of a wave of cyberattacks on South Korea's financial sector, with 16 financial firms hit as of October 14, according to Governor Lee Chan-jin. Daishin Securities said personal and credit information of 38,490 customers had been leaked.
- Coinbase denies systems breach, says vendor exposed customer data
Coinbase said an incident at analytics vendor Amplitude exposed the contact data of some customers, but it found no evidence of unauthorized access to its own systems. The incident affected a “small subset” of Coinbase customers and other Amplitude clients, and Coinbase said customer funds were not affected. The disclosure came alongside other reports that day, including South Korean brokerage Daishin Securities, which reported a leak of personal and credit information for 38,490 customers, and a breach investigation at Bithumb. Coinbase had also disclosed a separate data breach in May 2025 affecting less than 1% of its monthly transacting users, with reimbursement and remediation costs estimated at up to $400 million.
- Keystone breach deepens: Hackers stole key used to verify wallets as genuine
Hardware wallet maker Keystone said an attacker who breached its website last week also stole a key used to verify device authenticity, which could let counterfeit wallets pass its checks. The company plans to destroy 18,835 devices in inventory that contain the compromised key and has suspended shipments of devices using it. It disclosed that 25,964 buyer records from 2024 to 2026 were stolen after a faulty data-erasure tool failed to delete them, and that 12,873 checkout records held by Shopify were also taken. Devices made and delivered before the Oct. 20 incident are considered safe, but the authenticity of later devices cannot be guaranteed. The breach follows other security issues at hardware wallet makers this year, including Ledger, Coinkite and Trezor.
- Keystone says website breach exposed hardware wallet buyers’ addresses
Hardware wallet maker Keystone said an unauthorized third party accessed customer shipping information through a website breach, including names, contact details, shipping addresses and order details, after it confirmed the incident on Friday following a review of API activity with Shopify. The company said it has blocked access, fixed the vulnerability, opened an investigation and is emailing affected customers, but did not disclose how many were impacted. Security researcher Taylor Monahan warned the leaked addresses could expose holders to physical attacks and kidnappings, and blockchain security firm CertiK recorded 52 verified wrench attacks worldwide in the first half of 2026, up 33% from the same period last year. Some customers said they received breach notices despite buying devices more than two years ago, raising questions about Keystone’s 2023 pledge to cut data retention to 180 days. Keystone had not responded to Cointelegraph’s questions by publication time.
- Bithumb hacked through employee system as South Korean financial firms face cyberattacks
South Korean crypto exchange Bithumb said an outsider breached an internal employee mobile system used for work and messaging, and personal information was stolen, though no cryptocurrency funds have been reported lost. The exchange says the system is separate from its trading platform, but has not disclosed how many people were affected or whether deposits and withdrawals were disrupted. The breach comes amid cyberattacks on South Korean financial firms: the Financial Supervisory Service said 16 firms had been hit as of Oct. 14, and Daishin Securities reported a leak affecting 38,490 customers. It is Bithumb's second control lapse this year, after it mistakenly credited customers with 620,000 BTC, worth more than $40 billion at the time, instead of 620,000 won in February.
- South Korea plans cybersecurity overhaul after attacks hit banks, crypto firms
South Korea’s Financial Services Commission (FSC) is proposing tougher cybersecurity assessments after a review found deficiencies at 130 of 555 financial companies. Earlier security incidents involved 16 firms, including crypto exchanges, and exposed about 100,000 pieces of customer information such as names, contact details and ID numbers. Affected firms include Gopax operator Streami and crypto platform Prabang, which disclosed that an Oct. 2 hack exposed some customers’ personal info. Proposed reforms include vulnerability assessments at least twice a year for larger institutions, better information-sharing, possible AI-assisted monitoring for smaller firms, and extra inspections when urgent threats emerge. The FSC is still investigating whether AI was used in the incidents or whether they were linked to the same attackers.
Related markets
Latest news
- Goldman, BlackRock Alumni Raise $4 Million to Put Farm and Apartment Loans Onchain
Birch Hill, a New York startup founded by Wall Street alumni, closed a $4 million seed round led by Multicoin Capital, bringing its total funding to $6.5 million. The firm curates vaults on Morpho and has applied to FINRA for broker-dealer membership to offer private credit to verified accredited investors. Longer term, it plans to securitize U.S. multifamily, agriculture and energy loans to be held onchain within the U.S. regulatory framework, and says it met the SEC's Crypto Task Force in August. The funding will support an eight-person team that includes three hires from Yearn and a business development lead from Gauntlet.
- VietinBank launches overdraft loan secured by online deposits
VietinBank has launched an overdraft loan secured by online deposits on its VietinBank iPay Mobile app, letting customers access funds without withdrawing early from unmatured savings deposits. The credit limit can reach 90% of the deposit value and no more than 10 billion VND, is maintained for up to 12 months, and cannot exceed the remaining term of the deposit. Interest is charged only on the amount and number of days actually used, at the deposit rate plus a margin set by VietinBank, currently 3.5% per year. Eligible individual customers aged 18 or older with no group 2 or bad debt can register and disburse 24/7 in the app, while accumulation deposits and flexible-withdrawal deposits are excluded.
- TPBank Pre-Tax Profit Nears VND 7,500 Billion After Nine Months
TPBank (HOSE: TPB) reported nine-month profit of VND 7,464 billion, up 23.4% year on year, as consolidated total assets rose 17.9% from end-2025 to close to VND 600,000 billion at September 30, 2026. Outstanding credit, including corporate bonds, exceeded VND 345,000 billion, up 10.5% from the start of the year and reaching 96% of the annual plan, while total funding topped VND 529,000 billion, up 18.8% from end-2025. Net service income reached VND 3,559 billion, up 21.3%, and ROE was 16.63%, up 0.18 percentage points. The consolidated NPL ratio under Circular 31 fell to 1.52%, down 0.30 percentage points from a year earlier.
- JPMorgan, Coca-Cola, Dell also say 'no' to OKX-ICE tokenized tock trading plan
JPMorgan Chase, Coca-Cola and Dell Technologies are among companies that have objected to inclusion in OKXICE's planned tokenized stock trading venue, according to an updated public notice dated Oct. 27. Seven new objections raise the disclosed total to 33, up from 26, and 30 of the 62 companies originally proposed, about 48%, have opted out according to CoinDesk's tally. The joint venture of OKX and Intercontinental Exchange plans round-the-clock trading through Uniswap v4 liquidity pools on OKX's XLayer blockchain, settled in stablecoins, under the SEC's Innovation Exemption. Companies have 30 days after notification to object, and the article notes that issuers remain cautious about this emerging market structure.
- Google Debuts Crypto Security System As A.I. Threat Intensifies
Alphabet is planning to launch Google Multi-Party Compute, a cryptocurrency custody security service designed to help banks and financial institutions safeguard crypto and tokenized assets. It will be showcased at Alphabet's digital asset symposium on Oct. 28 and is currently in preview, with several financial institutions reportedly testing it. The service will eventually secure assets on the Ethereum and Solana blockchains, with commercial availability planned for early 2027 and pricing not yet disclosed. The launch comes as concerns grow that A.I. could attack and gain control of private keys, which are already a major hacking target; Chainalysis reports that 44% of cryptocurrency stolen in 2024 resulted from private key hacks. GOOGL shares have gained 20% over the past 12 months and trade at 320.58 USD per share.
- Qualcomm Stock Has an AI Opportunity Most Nvidia Investors May Be Overlooking
Qualcomm reported fiscal third-quarter revenue of 9.95 billion USD, above the 9.67 billion USD estimate, though non-GAAP EPS of 2.21 USD slightly missed the 2.22 USD estimate. Handset revenue fell 20%, while automotive revenue rose 61% to 1.59 billion USD. Management targets 40 billion USD in non-handset revenue by fiscal 2029, including more than 15 billion USD from data centers, supported by two hyperscaler custom silicon deals expected to start generating revenue in the December quarter. The author sets a 12-month price target of 218.57 USD with a Buy rating, versus a current price of 180.61 USD, with bull and bear cases at 237.99 USD and 185.64 USD. Risks include a 41.13% drop in operating income from rising memory and wafer costs, and expected Apple product revenue declines of about 50% from the September quarter to the December quarter. Qualcomm trades at 34 times earnings, compared with 42 for NVIDIA.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.