INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Viti's Personal Data Leaked in Cyber Attack
|
2026-10-29 20:23
HIGH
LOW
DATA BREACH
Executive Summary
AI-generated
On October 29, hackers breached Bithumb, South Korea's largest virtual asset trading platform, exposing personal info of 6,444 individuals and 715 employees and partners. The leaked information includes sensitive personal data such as resident registration numbers, driver's license numbers, account numbers, and copies of identification documents. An unauthorized user accessed the DaouOffice system on October 27, extracting personal info and files without permission for approximately 59 minutes between 11:28 AM and 12:27 PM. The attackers then posted a personal info leak notice on Bithumb's official website at 5:49 PM. As a result of this attack, there is a risk of identity theft and phishing, as well as 2nd-party fraud due to the leaked information including resident registration numbers and copies of identification documents.
Technical Mitigations AI-generated
• Block access to DaouOffice system using a technique like IP blocking or network segmentation.
• Use a product like Naver's security measures, such as blocking access routes and discontinuing groupware usage, after detecting unauthorized user activity.
• Hunt for indicators of phishing attempts by monitoring suspicious app installations or remote control requests.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
Incident Timeline
October 27
Attackers accessed the DaouOffice system, a company's internal mobile groupware system, for approximately 59 minutes between 11:28 AM and 12:27 PM on October 27.
Click on any entity below to view its context and source!
organisation
DaouOffice
The company also revealed that an unauthorized user accessed the DaouOffice system, a company's internal mobile groupware system, on October 27, and extracted personal info and files without permission.
general_metric
59 minutes
Attackers accessed the company's internal mobile groupware for approximately 59 minutes between 11:28 AM and 12:27 PM on October 27.
organisation
The Korea Internet & Security Agency
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
organisation
KISA
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
organisation
the Personal Information Protection Commission
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
October 28
The Korea Internet & Security Agency received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported it at 12:48 AM on October 28.
Click on any entity below to view its context and source!
organisation
The Korea Internet & Security Agency
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
organisation
KISA
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
organisation
the Personal Information Protection Commission
The Korea Internet & Security Agency (KISA) received a report of the incident at 11:39 PM on October 27, while the Personal Information Protection Commission reported the incident at 12:48 AM on October 28.
2026/10/29
Hackers breached Bithumb, South Korea's largest virtual asset trading platform, exposing personal info of 6,444 individuals and 715 employees.
Click on any entity below to view its context and source!
victims
715 employees
Hackers breach Bithumb, South Korea's largest virtual asset trading platform, exposing personal info of 6,444 individuals and 715 employees and partners.
Cyber attack on Viti, 6,444 customers and 715 employees' personal information leaked, including copies of resident numbers and ID cards..
victims
6,444 customers
Cyber attack on Viti, 6,444 customers and 715 employees' personal information leaked, including copies of resident numbers and ID cards..
organisation
KEB Hana Bank
Viti (formerly known as KEB Hana Bank) has confirmed a data breach involving individual customers and will notify affected customers via text message with details of the breach and prevention methods.
organisation
Naver
Naver reported the incident at 12:14 PM the same day, taking emergency measures such as blocking access routes and discontinuing groupware usage.
organisation
OTP
Naver advised customers to be cautious of the following: not responding to requests for passwords or one-time passwords (OTP), or authentication numbers, and to be wary of suspicious app installations or remote control requests, as well as asset transfers.
organisation
TF
The bank has established a dedicated incident response team (TF) to investigate the cause of the breach, in collaboration with its service development partner.
data_breach
646 Bithumb employees
The total number of leaked employee and partner information is 715, including 646 Bithumb employees and 69 external partners.
Tactical Metrics
Metrics
victims
715
Employees
Click for context!
Hackers breach Bithumb, South Korea's largest virtual asset trading platform, exposing personal info of 6,444 individuals and 715 employees and partners.
Cyber attack on Viti, 6,444 customers and 715 employees' personal information leaked, including copies of resident numbers and ID cards..
Metrics
victims
6,444
Customers
Cyber attack on Viti, 6,444 customers and 715 employees' personal information leaked, including copies of resident numbers and ID cards..
Metrics
data_breach
646
Bithumb Employees
The total number of leaked employee and partner information is 715, including 646 Bithumb employees and 69 external partners.
Intelligence Sources
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-30T12:16
Comprehensive Tactical Telemetry
Highly Correlated Entities
8x
organisation
Identified Entity
KEB Hana Bank
entity
3x
timeline
Temporal Reference
October 27
date
2x
general metric
Individuals
6,444
individuals
2x
tactic
Cyber Operation Type
Phishing
tactic
Contextual Telemetry
Context Block
8 METRICS
target region
Target Country
Korea, Republic of
country
victims
Employees
715
employees
general metric
Minutes
59
minutes
victims
Customers
6,444
customers
general metric
Remaining Individuals
844
remaining individuals
general metric
Information
715
information
data breach
Bithumb Employees
646
bithumb employees
general metric
External Partners
69
external partners
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.