Bithumb internal groupware hacked, employee data leaked
Teaser from the source
South Korean crypto exchange Bithumb detected unauthorized access by an outside party to its internal mobile groupware system on Oct 27 2026, leading to a personal data leak, and reported it to KISA and the Personal Information Protection Commission the same day. Information found so far mainly concerns employees, such as names, departments and contact details, but Bithumb has not ruled out that customer information shared in internal work files was included and is still analyzing the scope. Bithumb says its exchange systems are physically separated from the groupware and no crypto was stolen. Daishin Securities and Mirae Asset Global Investments reported separate breaches the same day.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on groupware
Other advisories
- HighCVE-2026-40187eGroupWare: Eval-Injection
- HighCVE-2026-40187eGroupWare: Eval-Injection
- HighCVE-2026-27823eGroupWare: unzureichende Autorisierung
- HighCVE-2026-27823eGroupWare: unzureichende Autorisierung
- Not ratedCVE-2026-45016EGroupware Vulnerable to Local File Inclusion via file:// URI in Mail Compose
- HighCVE-2026-40187EGroupware has Authenticated RCE via Malicious eTemplate Upload
- HighCVE-2026-27823EGroupware has a Remote Code Execution Vulnerability
- MediumCVE-2026-45551Group-Office ist ein Enterprise-Tool für Kundenbeziehungsmanagement und Groupware.
Source: https://pwn.watch/i/bithumb-groupware-breach-oct-2026