A serious exchange security incident has recently been exposed— a former customer service representative of a leading compliant platform was arrested in India for involvement in a customer data breach. The incident dates back to May of this year when the platform was targeted by hackers who successfully obtained a large amount of sensitive customer information by bribing contractor employees. This event serves as a reminder to all users that exchange information security must defend not only against external hackers but also internal personnel risks. Compliance training and background checks for staff clearly need to be strengthened, as customer asset security is the lifeline of an exchange.