Israeli crypto broker investigates customer data breach

TLDR

Bits of Gold, a regulated Israeli crypto broker, is probing a cyber incident that may have exposed customer identity and bank details via a breached third party system.

1. Bits of Gold reported unauthorized access to a support and analytics system that may have exposed personal and banking data, but says funds, passwords and private keys remain unaffected.
2. The main risk is targeted phishing and impersonation, especially given Bits of Golds large customer base and role in issuing the shekel pegged stablecoin BILS.
3. Key unknowns are how many customers were affected, whether data is misused, and which third party software was breached, so users should watch for follow up disclosures and suspicious contacts.

Deep Dive

1. What Was Exposed

Bits of Gold, a licensed Israeli crypto broker with over 300,000 customers, disclosed a cyber incident tied to a global breach of third party software used for support and data analysis. According to company notices, potentially exposed data includes names, ID numbers, email addresses, phone numbers, IP addresses, bank account details and public crypto wallet addresses, accessed via unauthorized entry into that external system. The broker states that customer funds, crypto assets, account passwords, scanned ID documents, full card numbers and CVV codes were not affected, and there is currently no indication the leaked data has been misused yet, based on its ongoing investigation and monitoring.

2. Why It Matters

Bits of Gold is one of Israels most prominent regulated crypto brokers and operates BILS, a shekel backed stablecoin approved after a regulatory sandbox, which raises the profile and potential impact of any incident. Large customer numbers and detailed banking and contact information create a rich target for social engineering; attackers can impersonate support staff, reference real details and pressure users to share codes or move funds. Similar recent incidents at SafePal and a Trezor shipping provider show a pattern where off chain order or logistics data is breached while private keys remain safe, shifting risk toward scams rather than direct wallet hacks.

3. What To Watch Next

The broker has blocked access to the affected system, engaged specialist incident response firms and notified regulators and customers, but several important details remain pending. These include confirmation of the exact number of affected customers, disclosure of the compromised software vendor, clarity on which records were actually accessed and any evidence that data is being used in fraud. Until those updates arrive, users should treat unsolicited emails, calls or messages referencing Bits of Gold or BILS with caution, verify requests through official channels and avoid sharing passwords, verification codes or private keys.

Conclusion

This breach underscores that even regulated crypto brokers can be exposed through third party tools, with the immediate risk concentrated in phishing rather than direct asset theft. For now, the core trading and custody infrastructure appears intact, but the incident highlights the need for users to treat any unexpected support outreach skeptically and for platforms to harden their wider data ecosystem, not just wallets.