Four data breaches involving suppliers Amplitude, Bithumb, Mirae Asset, and Daishin Securities are said to have once again brought the issue of encrypted data leaks to the forefront of attention. According to a post by CZ on X, supplier Amplitude leaked some users' contact information, and a user data breach also occurred at the South Korean exchange Bithumb. There are also reports that two traditional securities companies, Mirae Asset and Daishin Securities, have been affected as well.
These incidents highlight an unsettling reality: even if there are no issues with the client's funds, once personal information falls into the hands of criminals, the risk still exists.
Four reported data breaches have raised security concerns
These reported incidents involve both crypto services and traditional finance. Although it is claimed that the Coinbase supplier incident involved the leakage of contact information, funds are said to have not been affected.
However, leaked names, email addresses, phone numbers, home addresses, identification documents, and transaction records can all pose serious risks. Criminals may use this information to carry out phishing, SIM card swapping, and social engineering attacks. In some cases, the exposed personal details and trading information may also increase the risk of extortion in the real world.
Lock your encrypted accounts before anything goes wrong.
Start with the basics. Use separate email aliases for each exchange to avoid sharing unnecessary personal information, and consider using a separate phone number for your financial accounts as well.
Password managers can generate strong and unique passwords. For stronger authentication, it is best to use hardware security keys, passkeys, or authenticator apps, rather than two-factor authentication based on text messages.
If the platform supports it, you can enable a whitelist for withdrawal addresses, set a time lock for withdrawals, and use anti-phishing codes. Regularly check active sessions and the API key, delete any unused keys, and restrict necessary API access according to the IP address.
What should encrypted users do after a data breach?
Do not believe any proactive contact messages claiming to provide account recovery or emergency security assistance. Official exchange customer service will not request passwords, verification codes, or mnemonic phrases. You should visit the exchange's website directly and not click on links in emails or text messages.
If the platform issues a leak announcement, you should immediately change the affected passwords, revoke suspicious sessions and the API key, check withdrawal records, and verify whether your email address appears in the Have I Been Pwned list.
The leakage of encrypted data does not necessarily mean that funds have been stolen. However, stronger account security measures and less exposed personal information can indeed significantly increase the difficulty for attackers to succeed.
CoinPedia Disclaimer
CoinPedia has been providing accurate and timely cryptocurrency and blockchain news since 2017. All content is written by its team of analysts and journalists and follows strict editorial guidelines based on E-E-A-T (experience, professionalism, authority, credibility). Each article is cross-verified with reliable sources to ensure accuracy, transparency, and reliability. Its review policy guarantees a fair assessment when recommending exchanges, platforms, or tools. The website is committed to updating various types of information in the crypto and blockchain fields in a timely manner, covering everything from startups to industry giants.
Investment Disclaimer
All views and opinions expressed in this text represent the author's personal views on the current market conditions. Please conduct your own research before making any investment decisions. Neither the author nor the publisher assumes any responsibility for your financial choices.
Sponsorship and Advertising
Sponsored content and affiliate links may appear on the website. Advertisements will be clearly labeled, and the editorial content is completely independent from advertising partners.
