Four reported data leaks involve Coinbase vendor Amplitude, Bithumb, Mirae Asset, and Daishin Securities.
Four reported data leaks involve Coinbase vendor Amplitude, Bithumb, Mirae Asset, and Daishin Securities.
Exposed personal information can enable phishing, SIM swapping, impersonation, and social engineering.
Exposed personal information can enable phishing, SIM swapping, impersonation, and social engineering.
Unique passwords, passkeys, withdrawal restrictions, and careful handling of suspicious messages can reduce account risks.
Unique passwords, passkeys, withdrawal restrictions, and careful handling of suspicious messages can reduce account risks.
Crypto data leaks are back in the spotlight after four reported incidents involving cryptocurrency platforms and South Korean financial firms. According to an X post by CZ, Coinbase vendor Amplitude exposed some users’ information, while South Korean exchange Bithumb also experienced a user data leak. Two traditional securities firms, Mirae Asset and Daishin Securities, were also reportedly affected.
The incidents highlight an uncomfortable reality: protecting customer funds isn’t enough when personal information falls into the wrong hands.
Four Reported Data Leaks Raise Security Concerns
The reported incidents involve both cryptocurrency services and traditional finance. Although the Coinbase vendor incident reportedly exposed data, funds were said to be unaffected.
Still, leaked names, email addresses, phone numbers, addresses, identification documents, and transaction histories can create serious risks. Criminals may use this information for phishing, SIM swapping, and social engineering. In some cases, exposed personal details and information holdings can also increase the risk of real-world extortion.
Lock Down Your Crypto Accounts Before Trouble
Start with the basics. Use a unique email alias for each exchange, avoid sharing unnecessary profile details, and consider a dedicated phone number for financial accounts.
A password manager can generate strong, unique passwords. For stronger authentication, use hardware security keys, passkeys, or an authenticator app instead of SMS-based two-factor authentication.
Where available, enable withdrawal address whitelisting, withdrawal time locks, and anti-phishing codes. Regularly review active sessions and API keys, delete unused keys, and restrict necessary API access by IP address.
What Crypto Users Should Do After Breaches
Never trust unsolicited messages claiming to offer account recovery or urgent security assistance. Legitimate exchange support staff won’t ask for passwords, authentication codes, or seed phrases. Visit exchange websites directly instead of clicking email or text links.
If a breach is announced, change affected passwords, revoke suspicious sessions and API keys, review withdrawals, and check whether your email appears on Have I Been Pwned.
Crypto data leaks don’t automatically mean funds are compromised . But stronger account security and less exposed personal information can make life considerably harder for attackers.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
