Advertisement

Israel’s Biggest Crypto Broker Bits of Gold Suffers Major Data Breach

  • Bits of Gold, Israel’s largest cryptocurrency broker, said a cyberattack exposed personal information belonging to about 200,000 customers, although no customer funds or digital assets were compromised.
  • The Tel Aviv-based company revealed the incident on Sunday, saying hackers obtained unauthorized access through a third-party data analytics network. The information potentially accessed included names, national identification numbers, email addresses, phone numbers, IP addresses, bank account details and public wallet addresses.
  • Bits of Gold said it quickly shut down the unauthorized access after detecting the incident and disconnected the affected system from its data sources.
  • The company emphasized that cryptocurrency holdings and financial assets were not affected. It also said private keys, passwords, CVV numbers and scanned identification documents were not exposed.
  • According to the company’s initial assessment, the incident may have been linked to a broader cyberattack that targeted multiple organizations around the world.
  • The breach comes amid a series of recent security incidents involving crypto companies. Data tied to nearly 40,000 SafePal users was reportedly exposed after a third-party vendor was compromised. On Aug. 13, personal information involving almost 14,000 Trezor customers was also exposed following a breach at its fulfillment partner, ShipMonk.
  • Bits of Gold has launched a full investigation with support from an external cybersecurity firm specializing in incident response and forensic analysis. The company reiterated that customer funds and digital assets remain secure.
  • Established in 2013, Bits of Gold became Israel’s first crypto company to receive a permanent Financial Services Provider license. The company, led by CEO Youval Rouach, has more than 250,000 customers and maintains SOC 2 Type 2 certification.
  • Bits of Gold also reminded users that it will never request passwords, verification codes or private keys, and will not instruct customers to transfer funds as part of a security procedure.