South Korea's Financial Services Commission has begun joint investigations into cyber incidents including Bithumb's suspected employee data leak, while customer exposure remains under investigation. Consumer protection measures would include full compensation if losses occur. The commission also plans security safeguards comparable with those at banks for virtual asset firms and other sectors outside the Electronic Financial Transactions Act, continuing an emphasis in its earlier cybersecurity proposals.
SupervisionReviews, inspections & stress testsCyber resilienceConsumer and investor protectionData protection
South Korea's Financial Services Commission (FSC) has begun joint investigations into cyber incidents at major virtual asset firms, including Bithumb. At an emergency review meeting, Bithumb reported indications that information about employees of the exchange, its subsidiaries and partner companies had leaked following abnormal external access. Whether customer information was exposed remains under investigation.
According to Bithumb, the compromised system supported employees' work rather than core virtual asset trading infrastructure. No leak of wallet addresses or other information usable for fraudulent payments or virtual asset transfers had been confirmed. The FSC, Financial Supervisory Service and Financial Security Institute have begun investigations at affected firms. Supervisory measures will seek to ensure consumer protection, including full compensation if losses occur. Separately, investigations and victim protection measures will cover recently reported incidents at Mirae Asset Life Insurance and Mirae Asset Global Investments, alongside additional customer information leaks identified during the investigation at Daishin Securities.
The FSC also plans measures to bring security safeguards in virtual asset businesses and other sectors outside the Electronic Financial Transactions Act to levels comparable with banks and other major financial institutions, while strengthening readiness to respond to incidents promptly. Its earlier October cybersecurity reform proposals also addressed security gaps in sectors outside the Act.
South Korea's Financial Services Commission has detailed security checks at about 580 firms and plans for at least two vulnerability assessments annually, starting with large firms. Fraud safeguards include an artificial intelligence phishing risk score and proposed partial compensation for voice phishing losses regardless of fault. Further plans…
2026-11-02 South Korea Financial Services Commission South Korea
South Korea's Financial Services Commission reviewed domestic virtual asset providers' safeguards after Binance reported approximately USD 6.3 billion in unauthorized hot wallet withdrawals. Providers were urged to increase cold wallet holdings and reserves, continuously monitor deposits and withdrawals, and promptly share information on unusual…
2026-10-14 South Korea Financial Services Commission South Korea
The South Korea Financial Services Commission confirmed cyber breaches at 16 financial firms and about 100,000 exposed personal-information records, while finding deficiencies at 130 of 555 firms reviewed. It plans a systemwide security review, expanded threat sharing, AI-based monitoring and testing, more frequent vulnerability assessments and…