South Korean cryptocurrency exchange Bithumb reported signs of employee information exposure after unauthorized access to an internal work system. The country’s Financial Services Commission (FSC) said on October 28 that it was still investigating whether customer information was also affected.
In an official announcement, the FSC said Bithumb had reported apparent exposure of information relating to employees at the exchange, its subsidiaries and partner companies. The intrusion involved a work-support system rather than the central infrastructure used for cryptocurrency trading.
Regulator says customer impact remains unclear
The FSC met on October 28 with Bithumb, the Financial Supervisory Service, the Financial Security Institute and the Digital Asset eXchange Alliance to assess the reported intrusion and coordinate next steps.
According to the regulator, Bithumb had not identified the exposure of cryptocurrency wallet addresses or other information that could be used for unauthorized payments or digital-asset transfers. Whether any customer records were included in the compromised system remains under investigation.
That distinction matters: the disclosure confirms signs of employee-related information exposure, not theft of customers’ crypto holdings. The complete nature and volume of the exposed information have not yet been established.
On-site checks and security review
South Korea’s financial authorities said they had begun on-site investigations and information-sharing measures to establish the cause and scope of the incident. Regulators also pledged to supervise consumer protection responses should losses be identified.
The FSC said it intends to consider stronger cybersecurity arrangements for digital asset businesses and other financial firms. Those proposals are under discussion and should not be confused with rules that have already taken effect.
What users should monitor
Customers should follow official Bithumb notices and be cautious of messages that claim account access needs urgent verification. No verified public information establishes that the trading platform’s customer wallets were compromised in this incident.
BlockBriefing has separately reported on Bithumb’s suspension of Initia transfers, a different issue from this internal-system intrusion.
Primary source: South Korean Financial Services Commission notice, October 28, 2026.
