Bithumb and Major Financial Firms Hit by Data Breaches in South Korea

Three prominent South Korean financial institutions, including the major cryptocurrency exchange Bithumb, have reported significant data breaches following a series of coordinated cyberattacks. On October 28, 2026, reports emerged that sensitive information was compromised across the digital asset and traditional finance sectors, prompting immediate investigations by corporate security teams and national regulatory authorities. The incidents highlight a growing trend of cybersecurity threats targeting the South Korean financial infrastructure.

Bithumb and Brokerage Firms Confirm Network Intrusions

The breach at Bithumb, one of the largest virtual asset service providers in the region, originated within its internal mobile system. The company confirmed that personal information was leaked during the unauthorized access, though it is still determining whether the breach extends to its primary member database. Internal systems often house employee data and administrative credentials, which can serve as a gateway to broader client information.

Simultaneously, traditional financial entities reported the following impacts:

• Daishin Securities disclosed that approximately 38,000 customer records were exposed, leading the firm to implement emergency security protocols.
• Mirae Asset Global Investments confirmed a successful hacking attempt on its systems, with authorities currently assessing the scale of the data loss.
• Security spokespersons for the affected entities have not yet provided detailed comments regarding the specific nature of the stolen data.

Escalating Cyber Threats in the South Korean Market

These latest disclosures follow a broader pattern of cyber hostility directed at the nation’s financial core. Earlier this month, the Korea Financial Services Commission (FSC) revealed that a total of 16 financial institutions, including several commercial banks, had fallen victim to similar attacks. According to official figures, these combined incidents have resulted in at least 100,000 instances of data leakage to date.

Regulatory bodies in Seoul are currently intensifying their oversight of blockchain-based firms and traditional brokerages to ensure compliance with stringent data protection laws. This wave of attacks underscores the persistent vulnerabilities in cross-platform mobile systems and the necessity for robust encryption standards across both centralized exchanges (CEXs) and legacy investment firms.

As the investigation continues, the South Korean authorities are working to identify the source of the intrusions and mitigate further risks to the public. For investors and cryptocurrency users, these events serve as a reminder of the importance of personal security measures, such as two-factor authentication and the use of cold storage for long-term asset management. The systemic nature of these attacks suggests a sophisticated level of coordination that may require a comprehensive overhaul of national financial cybersecurity frameworks.