Bithumb Confirms Internal System Hack, Investigates Customer Data Exposure
Bithumb is checking whether an internal collaboration-system hack exposed customer data. The exchange says its separate trading network and crypto assets were unaffected.
Key Notes
- Bithumb confirmed unauthorized access to an employee collaboration system.
- Investigators are checking whether shared files contained customer information.
- The exchange says its separate trading network was not accessed and no customer crypto was stolen.
Bithumb has confirmed unauthorized access to an internal employee collaboration system and is investigating the scope of personal-information exposure, including whether customer records were included in files shared by staff.
The South Korean cryptocurrency exchange told News1 that its trading network is physically separate from the affected system and that no customer cryptocurrency was stolen. The October 28 report says customer-data exposure has not been confirmed.
Shared Files Are Under Review
The compromised mobile groupware uses DaouOffice, a workplace collaboration product supplied by Daou Technology. Employees use it for messaging and exchanging files; it is not the exchange’s customer trading interface.
Bithumb reported the unauthorized access to the Korea Internet & Security Agency and the Personal Information Protection Commission. It is checking employee information, internal conversations and shared documents to establish what may have been exposed.
Staff-only access does not rule out customer information appearing in work files. That is the question investigators are examining. The report gives no confirmed number of affected customers or complete list of exposed fields. Bithumb plans to provide further information after establishing the circumstances and scope.
Data Risks Extend Beyond Stolen Crypto
Keeping trading infrastructure separate can limit an intrusion’s reach, but an assurance about cryptocurrency balances does not settle the privacy implications of information stored elsewhere.
In an earlier October 16 security campaign, Bithumb warned that scammers can use leaked information to impersonate trusted contacts. It advised users to verify unexpected compensation or security-check messages through the official app or website, avoid links in unsolicited messages and use unique passwords and additional authentication. That guidance predates this incident.
The disclosure follows a separate Coinbase incident involving contact data at analytics vendor Amplitude. Coinbase said its own systems showed no evidence of unauthorized access. The two disclosures concern different systems; no connection between them has been established.
Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.
