Cryptocurrency Exchanges and Finance Firms Report Data Leaks

Security breaches hit Coinbase and Bithumb while financial institutions in South Korea also confirm incidents.

Updated on Oct. 28, 2026 in Cybersecurity

Isometric editorial illustration of a heavy industrial vault lock mechanism, representing the security challenges in digital financial infrastructure.
Coinbase, Bithumb, and multiple South Korean financial firms have confirmed significant data leaks, highlighting persistent cybersecurity vulnerabilities in global digital finance. AI Illustration. Upload story photo >

Live Poll

Do you trust cryptocurrency exchanges to keep your personal contact information secure?

Major cryptocurrency exchanges Coinbase and Bithumb, along with finance firms Daishin Securities and Mirae Asset Global Investments, have confirmed recent data leaks. The incidents follow a string of security challenges affecting the broader financial sector.

Why it matters

The interconnected nature of digital financial services makes these leaks significant, as attackers exploit vulnerabilities across both internal systems and third-party vendors. The breaches underscore a persistent threat to user data privacy in both the crypto and traditional banking industries.

Daishin Securities confirmed that 38,490 customers had data exposed in their breach. Additionally, criminals reportedly stole an estimated $30 million during the first half of 2026 through physical wrench attacks.

The players

Coinbase

A publicly traded company that operates a cryptocurrency exchange platform for buying, selling, and storing digital assets.

Bithumb

A South Korean cryptocurrency exchange that facilitates the trading of various digital currencies.

Changpeng Zhao

The founder of the cryptocurrency exchange Binance who frequently comments on security standards and best practices for the industry.

Daishin Securities

A South Korean financial services company that provides stock brokerage and investment banking services.

Mirae Asset Global Investments

An international financial services firm headquartered in South Korea that manages a diverse range of investment portfolios.

The details

Coinbase reported that its data was exposed through a third-party analytics vendor, Amplitude, while Bithumb identified unauthorized access to its internal mobile groupware system. These incidents are part of a larger pattern of instability, including data breaches at Shinhan Bank in late September and the use of AI tools by attackers to sell stolen financial information.

Timeline

  1. Shinhan Bank experienced data breaches starting in late September 2026.

  2. Approximately $30 million was stolen during the first half of 2026.

  3. Bithumb discovered unauthorized access to its internal systems on October 27, 2026.

  4. Changpeng Zhao shared security recommendations on October 28, 2026.

The Tech Race

These breaches occur as the industry continues to grapple with the legacy of the SAFU acronym, which was established in 2018 to promote higher security standards. As exchanges integrate with third-party vendors, they face a widening attack surface that often leaves legacy protection protocols struggling to keep pace.

Users of cryptocurrency and financial platforms should expect increased security prompts and potential identity verification updates as firms harden their defenses. Customers should prioritize enabling multi-factor authentication and monitoring account statements for any unauthorized activity.

The takeaway

Maintaining personal digital security is critical when financial institutions experience systemic vulnerabilities. Use unique, complex passwords and enable hardware security keys to protect your assets from unauthorized access.

Further reading

For more information on digital safety, visit our dedicated Cybersecurity section.

Live Poll

Do you trust cryptocurrency exchanges to keep your personal contact information secure?