Bithumb, South Korea's second-largest crypto exchange, has confirmed that its internal mobile system was hacked and that some customer personal information was exposed. According to Yonhap News, carried by the Korea Herald, the company is still investigating whether member data was caught in the breach, and it had not detailed the full scope at the time of reporting on October 28, 2026. Spokespeople for the firm did not immediately respond to requests for comment.
The timing matters as much as the target. Bithumb's disclosure landed the same day as two other large financial firms in the country reported intrusions, which reframes a single exchange hack as one node in a broader attack on Korean finance. The crypto market barely reacted: Bitcoin traded near $80,778 on October 28, 2026, up about 1.1% on the day, which fits a breach that so far looks like data theft rather than a drain of customer assets.
Three firms breached on the same day
Bithumb was not the only name in the news. Daishin Securities said the personal data of 38,490 customers, including names, email addresses, and mobile phone numbers, was compromised after hackers gained unauthorized access the prior week, and it said it would compensate affected customers under applicable law. Mirae Asset Global Investments confirmed a separate hacking incident that financial authorities have begun to inspect.
The pattern is wider than three headlines. South Korea's financial sector has been absorbing a run of intrusions, and the country's Financial Services Commission has tallied attacks on 16 financial institutions, including banks, tied to roughly 100,000 exposed records so far. A crypto exchange sitting in that list, rather than standing out as a one-off, is the part of this story that deserves attention.
Separating the data breach from the funds
The confirmed facts describe exposure of personal information from an internal system, not a theft of customer crypto. That distinction is worth stating plainly before it gets lost. Nothing Bithumb has disclosed points to withdrawals being drained or private keys being moved, and the market's flat reaction lines up with that reading.
The custody reality still sits underneath it. Holding assets on any exchange means the platform controls the keys, and your login credentials and personal data live on its servers. A data breach raises the risk of account-targeted attacks even when the balance is untouched, because the attacker now knows who you are and how to reach you. Spending or holding from your own wallet with self-custody options keeps keys and identity data off a third party's systems, though it shifts the full weight of key management onto the user. Neither model is risk-free; they move the risk to different places.
Leaked contact details feed targeted phishing
The near-term danger from a breach like this is impersonation. Once names, email addresses, and phone numbers are in an attacker's hands, a scammer can pose convincingly as Bithumb support or security through a call, a text, or an email, and recite real details to sound legitimate. Because mobile numbers are among the leaked fields at Daishin, SMS-based lures and SIM-swap attempts become easier, which is exactly why text-message two-factor codes are the weakest form of account protection to rely on right now.
The ask is always some version of the same thing: hand over a password, a one-time code, or help "secure" an account by moving funds. A legitimate exchange will never ask for your password or a live 2FA code. Reducing how much identifying data you hand to any service in the first place is part of the appeal of lower-verification options in the ecosystem, since a smaller data footprint means a smaller blast radius when a vendor is breached.
Steps for Bithumb account holders
Change your Bithumb password and move off SMS codes to an authenticator app or a hardware security key, since leaked phone numbers make text-based verification the softest target. Turn on a withdrawal address whitelist if the account supports one, and review recent login and transfer activity for anything you did not do.
Treat any unexpected message claiming to be from Bithumb as hostile until you verify it through the official app you opened yourself, not a link someone sent. Never share a password, a 2FA code, or a recovery phrase with anyone, including someone who sounds like support. If you hold more on the exchange than you actively trade, this is a reasonable moment to move part of it into a wallet you control. Users comparing their options can start from the crypto card comparison hub to see which providers lean custodial versus self-custodial.
Overview
Bithumb, South Korea's second-largest crypto exchange, confirmed on October 28, 2026 that its internal mobile system was hacked and some customer personal information was exposed, with the firm still investigating whether member data was included. The breach arrived the same day as intrusions at Daishin Securities (38,490 customers affected) and Mirae Asset Global Investments, part of a wider wave that South Korea's Financial Services Commission links to attacks on 16 financial institutions and about 100,000 exposed records. The confirmed damage is data exposure, not a theft of customer crypto, and Bitcoin was little changed on the day. The practical risk for account holders is targeted phishing built on leaked names, emails, and phone numbers, so the right moves are stronger non-SMS two-factor authentication, skepticism toward any surprise Bithumb outreach, and considering self-custody for funds that do not need to sit on the exchange.
