Bithumb said the employee system targeted in the attack that exposed personal data is separate from its trading platform and that customer crypto assets cannot be accessed through this breach.
The statement, reported by CoinDesk, provides new details on the status of customer funds following the previously reported Bithumb data breach. South Korea’s second-largest crypto exchange by trading volume detected unauthorized access on October 27 to an internal mobile system employees use for work and messaging.
Trading system is separate; data review is ongoing
The exchange said the attacked system operates independently of its trading infrastructure, adding that customer assets cannot be accessed through this route. As of Wednesday afternoon in Asia, when the news was reported, no loss of crypto funds had been reported.
The exposure of personal information has been confirmed, but an investigation is underway into which data was affected and whether customer information was among it. No details were shared on the number of people affected or the status of deposit and withdrawal services.
Bithumb reported the breach to the Korea Internet & Security Agency and the Personal Information Protection Commission.
Incidents at two financial institutions also under review
South Korea’s Financial Supervisory Service (FSS) is reviewing cyber incidents at three financial companies, including Bithumb. Daishin Securities said the personal and credit information of 38.490 customers had been exposed.
Mirae Asset Global Investments said it had blocked unusual access to some of its online systems and that investor information was not affected. The incidents at the three institutions therefore had differing effects on customer data.
FSS Governor Lee Chan-jin said financial institutions had been targeted by cyberattacks at a meeting with executives of bank holding companies. According to Lee’s statement earlier this month, 16 financial companies in the country had been affected by cyberattacks as of October 14.
Not investment advice.