Bithumb hack leaks staff data and regulators launch raid

South Korea's financial regulators began on-site inspections after Bithumb reported signs that abnormal external access had exposed employee information, while the crypto exchange was still checking whether customer data had been leaked.

The Financial Services Commission (FSC) said in an Oct. 28 notice that the information involved employees of Bithumb, its subsidiaries and partner companies. Bithumb told an emergency meeting that the affected system supports employees' work and is not part of the core computing facilities used for crypto trading.

According to the FSC, Bithumb had not confirmed a leak of information usable for fraudulent payments or crypto transfers, including wallet addresses. That finding leaves the broader assessment of possible customer-data exposure unfinished.

The immediate response brings the FSC, the Financial Supervisory Service and the Financial Security Institute into an on-site investigation. The FSC said the agencies were sharing information and cooperating closely to identify the incident's cause.

The emergency meeting was chaired by Yoo Young-joon, the FSC's digital finance policy head, according to the notice. Bithumb and DAXA joined the supervisory and security bodies, presenting the exchange's report to the institutions coordinating the response.

An Oct. 28 post by the FSC also described the emergency meeting and the start of on-site inspections. The FSC's own notice sets out the agencies' actions and Bithumb's account of the affected staff-support system.

The regulator's response includes a conditional compensation plan. If consumers suffer damage, the FSC said it plans to oversee protection measures including full compensation.

The staff-system disclosure and the continuing customer-data check leave the investigation with different questions to resolve. Bithumb identified the affected system in its report, while the regulators' on-site work aims to establish the cause.

The FSC has not announced a completed investigation or a final assessment of customer impact.

FSC targets a security gap beyond Bithumb

Alongside the inspections, the FSC outlined plans to strengthen security at virtual asset businesses and in other sectors it says are currently outside the Electronic Financial Transactions Act. It wants their safeguards to match those of banks and other major financial institutions.

The stated objective also includes readiness to respond quickly when an incident occurs. That gives the announcement immediate weight, prompting an investigation into Bithumb's reported breach and a broader effort to strengthen safeguards across the sectors the regulator names.

FSC chose a benchmark seeking safeguards comparable to those at major financial institutions in sectors that the regulator says sit outside the electronic-finance law. The proposed response concerns the standards firms should meet and their ability to respond quickly to an incident once it happens.

The Oct. 28 notice does not set out an enacted new requirement or an implementation deadline. The proposed response names crypto businesses, but the announcement leaves the specific measures and their timing to be established.

The FSC placed the Bithumb response alongside recently reported incidents at Mirae Asset's life-insurance and asset-management businesses and additional customer-data exposure found during Daishin Securities' investigation.

The notice extends the regulator's attention across several financial sectors, without establishing that the incidents share a technical cause.

The earlier backdrop is the South Korean financial-sector breach wave that was reported on Oct. 15, when the FSC named two other crypto firms. The new Bithumb disclosure adds an immediate inspection response and a specific plan to pursue bank-level security for sectors outside the electronic-finance law.

The FSC said Bithumb reported that it is still checking whether any customer data was leaked.