Bithumb#2

Date (as written): 2017-06
Year: 2017
Country: Korea, Republic of
Actors (as written): Bluenoroff
Actor pages: Bluenoroff
Tags (as written): FinancialGain Cryptocurrency DataBreach
Dollar figures (as written): $7 million; 7 million USD; 870,000 USD; 7m+; approximately $16 million in cryptocurrency (ransom demanded); $16 million

Source entries (7)

lazarus.day

Bithumb#2 · 2017-06

Bithumb disclosed that a 2017 hacking incident involving an employee personal PC exposed customer personal information, with later company reporting describing about 30,000 affected users and exposed names, email addresses, and phone numbers while stating that account IDs and passwords were not leaked. Bithumb said it reported the incident to Korean authorities, restricted affected accounts, operated a response center, compensated affected users, and distinguished the data exposure from later cryptocurrency losses tied to long-running credential-stuffing attempts and voice-phishing of authentication messages.

https://lazarus.day/incidents/bithumb2/

Dyadic Cyber Incident Dataset v2

BitHumb Crypto Heist #2 · 6/29/2017

In February 2017, at least $7 million in virtual currency was stolen from BitHumb, a South Korean cryptocurrency exchange. Incident dates inconsistent across media reports.

https://apnews.com/article/ece1c6b122224bd9ac5e4cbd0c1e1d80

https://www.zdnet.com/article/bithumb-cryptocurrency-exchange-hacked-a-third-time-in-two-years/

https://www.coindesk.com/bithumb-exchanges-31-million-hack-know-dont-know

Dyadic Cyber Incident Dataset v2

Bithumb_B · 7/1/2017

The panel said South Koreas Bithumb, one of the largest cryptocurrency exchanges in the world, was reportedly attacked at least four times. It said the first two attacks in February 2017 and July 2017 each resulted in losses of approximately $7 million,

https://apnews.com/article/ece1c6b122224bd9ac5e4cbd0c1e1d80

https://www.zdnet.com/article/bithumb-cryptocurrency-exchange-hacked-a-third-time-in-two-years/

https://www.coindesk.com/bithumb-exchanges-31-million-hack-know-dont-know

UN Panel of Experts S/2019/691

Reported theft of more than 7 million USD in second attack on Bithumb including: 870,000 USD in Bitcoin and 7 · July 2017

Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. B. Cryptocurrency. Reported theft of more than 7 million USD in second attack on Bithumb including: 870,000 USD in Bitcoin and 7 million USD in Bitcoin and Ethereum. National Intelligence Services attributed to the DPRK.

https://undocs.org/S/2019/691

UN Panel of Experts S/2024/215

Bithumb · June 2017

Annex 95: Suspected DPRK cyberattacks on cryptocurrency-related companies (2017-2023) investigated by the Panel. Table 2017: Victim: Bithumb; Date: June; Amount (USD equivalent): 7m+; Location: ROK

https://undocs.org/S/2024/215

Mendeley Data: Collection of DPRK state-sponsored threat actors' activities v2 (Lyu, Sungkyunkwan Univ.)

Bithumb#2 · 2017-06

Reported: 2017-06; Victims: Bithumb#2; Motivations: FinancialGain DataBreach; Sectors: Cryptocurrency; Countries: Korea, Republic of

https://data.mendeley.com/datasets/wwb2rzgfn7/2

US court filing via CourtListener RECAP: United States v. Hyok

Theft and release of customer information of South Korean Cryptocurrency Company after refused ransom · On June 29, 2017

Overt Act No. 14: On June 29, 2017, having gained unauthorized access to a computer system at an earlier date and stolen confidential customer information of the South Korean Cryptocurrency Company, the hackers publicly released that information after the South Korean Cryptocurrency Company refused to pay a ransom of approximately $16 million in cryptocurrency. [Case No. 2:20-cr-00614, U.S. District Court for the Central District of California; filing: SEALED INDICTMENT filed as to Jon Chang Hyok]

https://storage.courtlistener.com/recap/gov.uscourts.cacd.804762/gov.uscourts.cacd.804762.8.0_1.pdf

Suggest a correction on GitHub