A series of data exposure incidents has affected crypto exchanges and financial companies, including Coinbase and South Korea’s Bithumb, along with Daishin Securities and Mirae Asset Global Investments.
Coinbase said the issue originated at a third-party analytics provider, while Bithumb confirmed unauthorized access to an internal employee system. The South Korean financial firms reported separate breaches as authorities tracked a broader wave of cyberattacks in the sector.
Coinbase cites third-party analytics incident
Coinbase denied that its internal systems were breached after a security incident at analytics vendor Amplitude exposed a small subset of customer contact data. The exchange said it found no evidence of unauthorized access to Coinbase systems and that customer funds were not impacted.
Blockchain security firm SlowMist reported that around 70,000 Coinbase users may have been affected, with exposed details including email addresses and phone numbers. Coinbase has not confirmed the reported figure. The incident also affected other companies using Amplitude, according to the exchange.
Bithumb investigates employee data exposure
Bithumb confirmed unauthorized access to its internal employee mobile groupware system, which is operated through third-party platform Daou Office. The breach exposed employee details including names, work email addresses and mobile phone numbers.
The exchange said it was analyzing the exact scope, including the possibility that member information was involved. Bithumb reported the incident to South Korea’s Korea Internet & Security Agency and the Personal Information Protection Commission.
Daishin and Mirae Asset report breaches
Daishin Securities confirmed that personal and credit information belonging to 38,490 customers had been exposed. The brokerage first detected suspicious activity on October 17 and later found more than 60,000 harmful requests over 10 days. The leaked data included names, email addresses, home addresses and account details, with some information encrypted.
Mirae Asset Global Investments, which manages $461 billion in assets, detected unauthorized access to some of its web systems. The company said the incident exposed only internal business data and that there was no evidence investor details or personal credit information had been leaked.
Concerns over financial-sector security
Financial Supervisory Service Governor Lee Chan-jin said at least 16 financial firms had faced cyberattacks in October, leading to around 100,000 cases of data leaks. The incidents have raised wider concerns about the safety of South Korea’s financial sector.
