Coinbase denies that its internal systems have been compromised, while a previous incident related to a third-party Amplitude was alleged to have leaked contact information and other details.
Bithumb confirmed that its employee mobility system was subjected to unauthorized access, resulting in the leakage of names, work email addresses, and phone numbers.
Daxin Securities reported a data breach that affected 38,490 customers, with their personal and financial information being exposed.
Today, a wave of data breaches has hit the crypto and finance industries, with Coinbase and the South Korean crypto exchange Bithumb among the affected companies. The contact information of approximately 70,000 Coinbase users may have been leaked, while Bithumb is still verifying whether customer data has been compromised.
At the same time, two other Korean companies, Daishin Securities and Future Asset, also reported security vulnerabilities.
Coinbase denies system intrusion, claiming that the leakage of data from 70,000 users originated from a third party
Well-known cryptocurrency exchange Coinbase denies that its internal systems have been compromised, stating that a security incident at a third-party analytics service provider Amplitude exposed customer contact information.
Blockchain security company SlowMist reports that approximately 70,000 Coinbase users may have been affected, with the leaked information including email addresses and phone numbers.
However, Coinbase indicates that the event occurred at Amplitude, not within its own system. This event also affected other companies that use Amplitude, therefore it is considered a third-party data breach.
"We have not found any evidence of unauthorized access to the Coinbase system, and customer funds have not been affected either."
Coinbase has not confirmed the claim that 70,000 users have been affected as reported by the outside world.
Bithumb Investigation into Employee Data Breach
Unlike Coinbase, which attributed the incident to external analytics service providers, South Korea's Bithumb confirmed that its internal employee collaboration system had been subjected to unauthorized access. This system is operated through a third-party platform Daou Office.
This leak exposed employee information, including names, work email addresses, and mobile phone numbers.
The exchange is reviewing system records to confirm whether customer information has also been leaked. Bithumb indicates that they are “analyzing the exact scope, including the possibility of member information being involved.”
At the same time, Bithumb has reported this incident to the Korea Internet Promotion Agency and the Personal Information Protection Commission.
Daxin Securities leaked customer data
Data breaches have also affected South Korea's traditional financial industry. On October 28th, brokerage firm Daesin Securities confirmed that the personal and credit information of 38,490 customers had been leaked.
The company initially detected suspicious activity on October 17th, and subsequently identified over 60,000 malicious requests within 10 days.
The leaked data includes names, email addresses, home addresses, and account information, some of which has been encrypted.
Future Asset Reporting System Compromised
Meanwhile, Future Asset Global Investments, which manages assets worth $461 billion, discovered that some of its web page systems had been accessed without authorization. The company stated that this incident only exposed internal business data, and there is no evidence to suggest that investor information or personal credit information was leaked.
These incidents have sparked broader concerns about the security of South Korea's financial industry among the public.
The chairman of the Financial Services Commission of South Korea, Lee Chang-bum, stated that in October, at least 16 financial companies suffered cyberattacks, resulting in approximately 100,000 data breaches.
