Israel’s largest crypto broker Bits of Gold hit by data breach affecting 200,000 customers
Reported by CoinDesk · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Israel’s largest cryptocurrency broker, Bits of Gold, reported a data breach affecting about 200,000 customers. Hackers accessed personal data through a third-party data analytics provider, obtaining names, national ID numbers, emails, phone numbers, IP addresses, bank account details, and public wallet addresses. No funds, passwords, private keys, or scanned IDs were compromised. This incident follows similar breaches at SafePal and Trezor involving their external vendors.
Why it matters
The breach is part of a recent wave of crypto industry data exposures linked to third-party vendors, highlighting ongoing risks in customer data security within the sector. Bits of Gold emphasized that digital assets and funds remain safe, but the exposure of personal information could have implications for user privacy and trust in crypto brokers.
Key context
Bits of Gold is a Tel Aviv-based broker founded in 2013, recognized as the first Israeli crypto company to receive a permanent Financial Services Provider license. The company has over 250,000 customers and holds an SOC 2 Type 2 certification. The breach occurred via unauthorized access to a third-party data analytics network and coincides with security incidents at SafePal and Trezor, each involving breaches of external vendors.
Key numbers and entities
Bits of Gold (around 200,000 customers affected), SafePal (nearly 40,000 users affected), Trezor (about 14,000 customers affected), third-party data analytics provider, ShipMonk (Trezor’s fulfillment partner). CEO Youval Rouach leads Bits of Gold.
What remains unclear
The source does not flag open questions or provide detailed information about the attacker, the full scope of the breach, or potential follow-up actions beyond the ongoing investigation.