Coinbase and Bithumb Report Customer Data Breaches

1

Криптобиржи Coinbase и Bithumb сообщили об утечке данных клиентов0

The largest U.S. , Coinbase, and South Korea’s leading crypto asset trading platform, Bithumb, have reported customer data breaches. The exact number of affected users has not been disclosed by either exchange.

Coinbase management assured that its own systems were not compromised. The incident occurred on the side of Amplitude, an analytics service used by Coinbase. The exchange stated that the leak affected a small portion of customer contact data, as well as information about Amplitude users. The full list of leaked data is not being disclosed. Coinbase insists that customer funds are safe. Affected customers will receive email notifications, the exchange announced.

Coinbase has not had a data breach. Amplitude, an analytics vendor, experienced a security incident which impacted a small subset of Coinbase customer contact data, among other Amplitude customers. We’ve found no evidence of unauthorized access to Coinbase systems, and customer funds were not impacted. We are notifying impacted customers and regulatory agencies in accordance with our legal obligations.

— Coinbase Support (@CoinbaseSupport) October 28, 2026

South Korean brokerage company Daishin Securities, which deals with tokenized securities, also reported a data leak and provided more precise figures. Hackers attacked a server associated with the remote brokerage account opening service, compromising the data of 38,490 clients (names, email addresses, home addresses, communication system IDs, bank names, bank account numbers, brokerage account numbers, and mobile phone numbers). The company detected suspicious activity on October 17 and blocked the attackers’ IP addresses, notifying financial regulators about the incident.

South Korean company Mirae Asset Global Investments, which owns the cryptocurrency exchange Korbit, also reported unauthorized access to a number of its systems. Unknown individuals were viewing information used for internal business operations. However, the company assured that no user personal or banking data was stolen. No financial losses, malware infections, or service disruptions were recorded.

Recently, Foundation, the manufacturer of Passport hardware wallets, warned customers about phishing emails from the company’s official domains. The attackers gained access to the Cloudflare hosting provider’s API keys.