Bits of Gold, największy broker kryptowalut w Izraelu, zhakowany — ujawniono dane osobowe około 200,000 klientów
Najważniejsze informacje
- •Hakerzy ukradli dane osobowe około 200,000 klientów Bits of Gold po uzyskaniu nieautoryzowanego dostępu do zewnętrznej sieci analityki danych.
- •Ujawnione informacje obejmują nazwiska, numery dowodów osobistych, adresy e-mail, numery telefonów, adresy IP, dane rachunków bankowych i publiczne adresy portfeli, ale nie doszło do kompromitacji środków, kluczy prywatnych, haseł, kodów CVV ani zeskanowanych dokumentów tożsamości.
- •Po wykryciu incydentu Bits of Gold zablokował nieautoryzowany dostęp i rozpoczął kompleksowe dochodzenie z firmą specjalizującą się w reagowaniu na incydenty cybernetyczne.
- •Broker obsługuje ponad 250,000 klientów i był pierwszą firmą kryptowalutową w Izraelu, która otrzymała stałą licencję Financial Services Provider, a także posiada certyfikację SOC 2 Type 2.
- •Spółka stwierdziła, że naruszenie wygląda na część szerszego globalnego ataku wymierzonego w wiele firm, i nie podała nazwy zaangażowanego zewnętrznego dostawcy.
Israel's largest cryptocurrency broker, Bits of Gold, disclosed that hackers stole the personal data of roughly 200,000 customers after gaining unauthorized access to a third-party data analytics network.
The compromised information includes names, national ID numbers, email addresses, phone numbers, IP addresses, bank account details, and public wallet addresses. The company stressed that no funds, private keys, passwords, CVV codes, or scanned ID documents were exposed. Security practitioners generally regard this type of information — particularly national ID numbers combined with bank details — as raw material for targeted phishing and impersonation attempts, a risk that persists even when no funds are directly compromised.
“Upon detection of the incident, we blocked access and disconnected the system from the information sources, so this access ended,” Bits of Gold said.
“Our security team has begun a comprehensive investigation of the incident, with the assistance of a company specializing in cyber incident investigation and response,” the company added.
“It is important to emphasize: your digital assets and funds are safe and were not involved in the incident.”
Founded in 2013, Bits of Gold became the first crypto company in Israel to receive a permanent Financial Services Provider (FSP) license — a regime overseen by Israel's Capital Market, Insurance and Savings Authority, which regulates financial asset service providers in the country — and also holds SOC 2 Type 2 certification. The platform serves more than 250,000 customers.
Bits of Gold said the breach appeared to be part of a wider global attack affecting multiple companies. Incidents that originate at third-party vendors and analytics tools connected to a company's infrastructure, rather than in the company's own core systems, are a recurring pattern in data security, and they can expose customer data even when the broker itself is not directly breached. Bits of Gold did not name the third-party provider involved, and with the investigation still under way, further details about the broader campaign may yet emerge as the inquiry continues.
Source: BitcoinKE
