Bits of Gold Data Breach Exposes Information of 200,000 Customers

Cryptocurrency broker Bits of Gold said hackers stole personal information linked to roughly 200,000 customers, while customer funds and digital assets remained secure.
The Tel Aviv-based company disclosed the breach on Sunday, saying an attacker gained unauthorized access to a third-party data analytics system. The compromised information may have included customer names, national identification numbers, email addresses, phone numbers, IP addresses, bank account details and public wallet addresses.
Bits of Gold said it immediately restricted access and disconnected the affected system from its data sources after discovering the incident, bringing the unauthorized access to an end.
The company stressed that sensitive financial and security information, including funds, private keys, passwords, CVV numbers and scanned identification documents, was not exposed.
Based on its preliminary investigation, Bits of Gold believes the incident was part of a broader international cyberattack that targeted multiple companies at the same time.
The breach marks the third major data-security incident reported in the crypto sector within a week. Nearly 40,000 SafePal users were affected on Sunday after a third-party service provider was compromised. Earlier, on Aug. 13, information belonging to almost 14,000 Trezor wallet customers was exposed after its fulfillment partner, ShipMonk, suffered a breach.
Bits of Gold said its security team has launched a detailed investigation with help from a specialized cybersecurity incident-response firm. The company reiterated that customer cryptocurrency and funds were not involved in the breach.
Founded in 2013, Bits of Gold became the first Israeli cryptocurrency company to obtain a permanent Financial Services Provider license. Led by CEO Youval Rouach, the company serves more than 250,000 customers and holds SOC 2 Type 2 certification.
The broker also warned customers that it will never request passwords, verification codes or private keys, nor will it ask users to transfer funds.