Holy crap, Bithumb's in trouble too! Multiple crypto platforms have reported user data breaches this year; beware of targeted phishing attacks! Bithumb has confirmed unauthorized access to its internal mobile office system, resulting in the leakage of personal information. Whether customer data has been affected is still under investigation. On the same day, two other financial institutions in South Korea reported security incidents, with Daeil Securities confirming the leakage of information on 38,490 customers. Previously, South Korean regulators disclosed that 16 financial institutions had suffered security breaches, involving approximately 100,000 data breach records. I've compiled a list of some alarming crypto platform and hardware wallet customer data breaches since 2026: Bithumb (October): Internal office system breached; personal information leak confirmed; whether customer information is affected is still undetermined. Coinbase (October): Third-party provider Amplitude experienced a security incident, affecting some customer contact information. Coinbase's own system did not detect any intrusion. GOPAX (October disclosure): A South Korean exchange; information on 7 customers and 2 employees or former employees was accessed externally. Pravang (October): A South Korean crypto-related platform suffered a data breach affecting approximately 20 customers, resulting in the leakage of their names, contact information, and other personal data. Keystone (October): Its hardware wallet online store was hacked, leading to the leakage of customer names, shipping addresses, and order information. The number of affected customers was not disclosed. Ledger (January): Its e-commerce partner, Global-e, was hacked, resulting in the leakage of names, contact information, and order information for some hardware wallet buyers. Trezor (August-September): Its logistics partner, ShipMonk, experienced a data breach affecting approximately 80,000 customers, including some historical order data. SafePal (August): Its order tracking system had an access vulnerability, exposing the names, phone numbers, shipping addresses, and purchase records of approximately 39,798 customers. With this information, scammers can impersonate official customer service, accurately stating your order, address, and even account information. They can then use excuses such as account anomalies, frozen assets, or wallet upgrades to trick you into handing over verification codes or mnemonic phrases. Please be careful! Especially when receiving emails claiming to be official security notifications, refunds, or firmware upgrades, never click on any links directly. Log in to your account through the official app, enable two-factor authentication, and never provide your mnemonic phrase to anyone.