Bithumb is once again serving up its familiar three-part PR package: the system that was breached was an internal employee system, it was isolated from the trading system, and customer assets are safe.
Sounds reassuring, but I actually think this is exactly the kind of incident we should be most wary of.
What was accessed was the mobile office/group chat software used by employees (some say it was Daou Office). The leak of employees’ personal information has been confirmed, but whether customer data was taken is still officially “under investigation.” No money lost doesn’t mean nothing happened. If employee lists, communications, and internal documents get out, we all know what comes next: impersonating customer support or internal staff, highly targeted phishing, or even socially engineering employees themselves to gain higher-level access. The major cases where exchanges get completely cleaned out often start with “just an office system.”
For context, since the end of September, at least 16 financial institutions in South Korea have been hit. Daishin Securities alone leaked the names, email addresses, and phone numbers of 38,490 customers. This isn’t Bithumb being unlucky; it’s someone casing the entire South Korean financial sector before treating it like an ATM.
There are also tons of accounts on X slapping on clickbait headlines like “Bithumb hacked, user data leaked” to chase views. The fact is, customer data has not been confirmed leaked. Exaggerating it or downplaying it is equally disgusting.
My approach is simple: if you use a Korean exchange, treat any call, text, or email claiming to be “Bithumb support” as a scam for the time being. Check your withdrawal whitelist and 2FA yourself. Don’t wait for the official investigation to wrap up.
#Bithumb #ExchangeSecurity
Sounds reassuring, but I actually think this is exactly the kind of incident we should be most wary of.
What was accessed was the mobile office/group chat software used by employees (some say it was Daou Office). The leak of employees’ personal information has been confirmed, but whether customer data was taken is still officially “under investigation.” No money lost doesn’t mean nothing happened. If employee lists, communications, and internal documents get out, we all know what comes next: impersonating customer support or internal staff, highly targeted phishing, or even socially engineering employees themselves to gain higher-level access. The major cases where exchanges get completely cleaned out often start with “just an office system.”
For context, since the end of September, at least 16 financial institutions in South Korea have been hit. Daishin Securities alone leaked the names, email addresses, and phone numbers of 38,490 customers. This isn’t Bithumb being unlucky; it’s someone casing the entire South Korean financial sector before treating it like an ATM.
There are also tons of accounts on X slapping on clickbait headlines like “Bithumb hacked, user data leaked” to chase views. The fact is, customer data has not been confirmed leaked. Exaggerating it or downplaying it is equally disgusting.
My approach is simple: if you use a Korean exchange, treat any call, text, or email claiming to be “Bithumb support” as a scam for the time being. Check your withdrawal whitelist and 2FA yourself. Don’t wait for the official investigation to wrap up.
#Bithumb #ExchangeSecurity