South Korean crypto exchange Bithumb detected unauthorised access to its internal mobile groupware system for employees on 27 October. Employee personal data, such as names, emails and phone numbers, was leaked, and the exchange is checking whether customer data was also affected. Bithumb reported the incident to KISA and Korea's Personal Information Protection Commission. According to the company, the system is physically separate from the trading system, so customer funds were not accessed or lost.

What it means: The attack comes at a time when several financial organisations in South Korea, and in Japan, are facing a wave of cyberattacks. The positive element is system separation: because the employee collaboration tool is not connected to the trading platform and wallets, the breach did not touch funds. That is exactly the kind of architecture supervisors ask of crypto providers. The leak of staff data is not harmless, though. Staff names, emails and phone numbers are used for targeted phishing and social engineering, among the most common entry points for the big crypto thefts of recent years. So in the coming period the exchange will need to be especially careful with requests that appear to come from colleagues. In the EU, crypto providers licensed under MiCA also fall under DORA, which requires ICT risk management, reporting of major incidents and resilience testing. For Greek financial firms, the incident is a reminder to check that staff communication and collaboration tools are isolated from critical systems and that employees are trained to recognise targeted deception attempts.

Read the original on CoinDesk

Related service: Consulting

Related stories