---
title: Upbit reports data breach in internal mobile groupware system
url: https://www.dataloco.com/en/upbit-reports-data-breach-in-internal-mobile-groupware-system
published: 2026-10-30T15:20:54+00:00
language: en
section: Security
source: https://www.dailysecu.com/news/articleView.html?idxno=209105
organizations: Upbit, KISA
publisher: Dataloco
---

# Upbit reports data breach in internal mobile groupware system

Upbit, a virtual asset exchange, confirmed that an unauthorized external actor accessed its internal mobile groupware system, resulting in the leakage of employee personal information. The company is currently investigating whether customer data was included in the compromised business files. As of the latest available information, the total scale of the damage and the specific status of customer data exposure remain unconfirmed.

The exchange detected the intrusion on October 27 and immediately reported the incident to the Korea Internet and Security Agency and the Personal Information Protection Commission on the same day. The date of detection does not necessarily align with the initial time of the attack or the duration of the intrusion, details that require further verification. The compromised system is the internal mobile groupware, which employees use for business communication and file sharing. Determining the full scope of the leak requires a thorough review of the business files stored within this system.

Upbit is analyzing the business files exchanged via internal messaging to determine if they contain customer personal information. The number of affected individuals and the specific data items leaked have not yet been finalized. A primary focus of the ongoing investigation is to establish whether the breach extended beyond employee data to include customer information. No specific attack techniques or vulnerabilities used for the initial intrusion have been disclosed, so it is premature to attribute the cause to a specific product flaw or account theft.

The company states that its trading service and groupware system are physically separated, and it reports that no virtual assets were stolen in this incident. This claim is based on the company's explanation and requires verification alongside the full investigation results. Even with physical separation, information leakage can occur if business materials contain personal data. It is critical to determine for what business purposes customer information was shared or stored and whether those materials were within the scope of external access.

Upbit had previously issued a security warning on October 14, advising users to be cautious of contacts impersonating the exchange or related agencies. The warning noted that attackers might use actual personal information, such as names, phone numbers, and email addresses, to appear as legitimate service representatives. Users are advised not to trust a contact solely because they know personal details. If anyone requests link access, program installation, or authentication information for damage assessment or security checks, users should verify the facts directly through the official app or website. It is currently unconfirmed whether the leaked information has been used for fraud.

## This story in other languages

- [Español](https://www.dataloco.com/es/bithumb-sufre-hackeo-en-su-sistema-de-grupo-movil-y-se-confirma-filtracion-de-datos-de-empleados)
- [Português (Brasil)](https://www.dataloco.com/pt-br/bithumb-sofre-invasao-em-sistema-de-grupo-interno-e-vaza-dados-de-funcionarios)
- [Italiano](https://www.dataloco.com/it/bithumb-subisce-lhacking-del-sistema-di-groupware-aziendale-con-fuga-di-dati)
- [Nederlands](https://www.dataloco.com/nl/bithumb-meldt-lek-van-persoonlijke-gegevens-na-hack-van-intern-systeem)
- [Norsk](https://www.dataloco.com/no/bithumb-opplever-datalekkasje-fra-internt-system)
- [Polski](https://www.dataloco.com/pl/wyciek-danych-pracownikow-w-gieldzie-bithumb-po-ataku-na-systemy-wewnetrzne)