FSS assesses South Korean firms after Bithumb employee system breach amid cyberattacks

The exchange confirmed the intrusion on Tuesday and notified the Personal Information Protection Commission and the Korea Internet & Security Agency. Bithumb stated the compromised system is separate from its trading platform, meaning "customer virtual assets cannot be accessed through this breach."

As of Asian afternoon hours, no losses of cryptocurrency funds were reported following the breach. The exchange is currently analyzing the precise extent of the incident, including the possibility of member information being involved.

The incident occurs amid a broader backdrop of cyberattacks affecting other financial institutions within South Korea. The Financial Supervisory Service was assessing Bithumb among three firms on Wednesday.

Daishin Securities reported that an external attack caused a leak of personal and credit information belonging to 38,490 of its clientele. Mirae Asset Global Investments stated it had blocked abnormal access to some of its web systems, and investor data remained unaffected.

FSS Governor Lee Chan-jin noted that "major financial investment companies experienced overall hacking incidents yesterday," during a meeting with bank holding company chairs. Earlier in the month, he had mentioned that cyberattacks had affected 16 South Korean financial firms as of October 14.

This event represents a second security issue for Bithumb this year. In February, the exchange mistakenly credited customers with 620,000 BTC, valued at over $40 billion at the time, instead of 620,000 won. CEO Lee Jae-won attributed that prior error to weak internal controls, stating the exchange was "acutely aware of the deficiency in internal system control."

These events highlight the heightened regulatory and security scrutiny facing market participants as cyber incidents continue to impact the broader financial sector.

Why it matters

This incident highlights the increasing vulnerability of South Korean financial entities to cyber threats, even when systems are segmented. Regulators are closely watching these events, as seen by the Financial Supervisory Service assessing multiple firms for security lapses. Investors should watch how these exchanges respond to data exposure risks.