Bithumb 6,444 Customer Data Breach Found After Employee Leak

Digital Today reports that, according to a Bithumb website notice, an unauthorised outside party broke into Dawoffice, the company's internal mobile groupware system, on Oct. 27.[2]According to Digital Today, Bithumb said information for 5,600 customers was leaked in encrypted file form, while the remaining 844 had details directly exposed, including names, mobile phone numbers, email addresses, resident registration numbers, driver's licence numbers, bank account numbers and copies of identification.[2] The outlet also reported that personal information for 715 employees was also leaked.[2]Digital Today reports that Bithumb said it first notified regulators about the employee leak, and that it had not confirmed at the time whether customer information had been leaked, later identifying the customer data leak while further analysing the scope of damage.[2]The Herald Business reports that the breach is believed to have exploited a vulnerability in the internal mobile groupware system provided by a third-party vendor.[3] According to the same outlet, the intrusion occurred between 11:28 a.m. and 12:27 p.m.[3]According to SBS, Bithumb said the system is separated from customer exchange accounts and asset holding information, so there were no circumstances indicating that the exchange service or customer database was directly compromised.[1]Bithumb CEO Lee Jae-won told The Herald Business: "I sincerely apologize for the concern and anxiety this has caused our customers."[3]The Hack Academy notes that the public record so far did not include findings from the FSS inspection into the incident.[4]