Bits of Gold, Israel's Largest Crypto Broker, Hacked — Personal Data of ~200,000 Customers Exposed
Key Takeaways
- •Hackers stole the personal data of roughly 200,000 Bits of Gold customers after gaining unauthorized access to a third-party data analytics network.
- •The exposed information includes names, national ID numbers, emails, phone numbers, IP addresses, bank account details, and public wallet addresses, but no funds, private keys, passwords, CVV codes, or scanned ID documents were compromised.
- •Bits of Gold blocked the unauthorized access upon detection and has launched a comprehensive investigation with a company specializing in cyber incident response.
- •The broker serves more than 250,000 customers and was the first crypto company in Israel to receive a permanent Financial Services Provider license, also holding SOC 2 Type 2 certification.
- •The company stated the breach appears to be part of a wider global attack affecting multiple companies, and it did not name the third-party provider involved.
Israel's largest cryptocurrency broker, Bits of Gold, disclosed that hackers stole the personal data of roughly 200,000 customers after gaining unauthorized access to a third-party data analytics network.
The compromised information includes names, national ID numbers, email addresses, phone numbers, IP addresses, bank account details, and public wallet addresses. The company stressed that no funds, private keys, passwords, CVV codes, or scanned ID documents were exposed. Security practitioners generally regard this type of information — particularly national ID numbers combined with bank details — as raw material for targeted phishing and impersonation attempts, a risk that persists even when no funds are directly compromised.
"Upon detection of the incident, we blocked access and disconnected the system from the information sources, so this access ended," Bits of Gold said.
"Our security team has begun a comprehensive investigation of the incident, with the assistance of a company specializing in cyber incident investigation and response," the company added.
"It is important to emphasize: your digital assets and funds are safe and were not involved in the incident."
Founded in 2013, Bits of Gold became the first crypto company in Israel to receive a permanent Financial Services Provider (FSP) license — a regime overseen by Israel's Capital Market, Insurance and Savings Authority, which regulates financial asset service providers in the country — and also holds SOC 2 Type 2 certification. The platform serves more than 250,000 customers.
Bits of Gold said the breach appeared to be part of a wider global attack affecting multiple companies. Incidents that originate at third-party vendors and analytics tools connected to a company's infrastructure, rather than in the company's own core systems, are a recurring pattern in data security, and they can expose customer data even when the broker itself is not directly breached. Bits of Gold did not name the third-party provider involved, and with the investigation still under way, further details about the broader campaign may yet emerge as the inquiry continues.
Source: BitcoinKE
