2 hours ago
6
Key Takeaways
- Breach found October 27 in staff groupware
- So far mainly employee information appears exposed
- Bithumb’s 2017 leak also began on staff hardware
- Affected users must be told within 72 hours
Bithumb discovered unauthorized access to its internal mobile groupware on October 27 and reported it to the Korea Internet & Security Agency and the Personal Information Protection Commission the same day, Yonhap reported.
What the attackers reached
The breached tool is Daou Office, a workplace app Bithumb staff use for messaging and file sharing, News1 reported. Bithumb told the outlet that its trading services run on a physically separate network and that no cryptocurrency was stolen. That matches the controls it described in an October 2 security notice: cold-wallet storage and approval steps for moving customer assets, plus limits and access logging for staff handlin...
English (US)