South Korean cryptocurrency exchange Gopax has posted a belated apology regarding a customer personal information leak. Roughly a month elapsed between when the breach occurred and when the exchange officially recognized it, and the exchange’s own explanation came only two days after the financial regulator first disclosed the incident.

Gopax announced the personal information leak and the scope of the damage in a notice on its website at 4:24 p.m. on the 16th — two days after South Korea’s Financial Services Commission revealed the matter on the 14th. According to the notice, abnormal access to some customer accounts began early last month, and the exchange only confirmed the activity earlier this month.

The incident exposed the…