Israeli crypto broker discloses customer data leak

TLDR

Israeli crypto broker Bits of Gold has disclosed a customer data leak that exposed personal details but not crypto funds.

1. Bits of Gold reported unauthorized access to a third party support system, potentially exposing customer identity and banking details while keeping crypto assets and passwords safe.
2. The main impact is a higher phishing and impersonation risk for affected users, as attackers can use leaked data to mimic the broker or other financial services.
3. Key next steps are clearer disclosure of how many customers were affected, which vendor was breached, and whether any stolen data is already being misused.

Deep Dive

1. What Was Exposed

Bits of Gold, a regulated Israeli crypto broker with over 300,000 customers, reported a cyber incident linked to a global third party software breach affecting its support and data analysis system. In its notice, the firm said the potentially exposed information includes names, national ID numbers, emails, phone numbers, IP addresses, bank account details, and public wallet addresses, but not funds, passwords, scanned ID documents, full card numbers, or CVV codes Bits of Gold incident summary.

The affected system has been disconnected, access blocked, authorities notified, and a specialist incident response firm engaged to investigate. Reports mention up to 200,000 possible affected customers, though Bits of Gold has not confirmed a precise number yet customer breach overview.

2. Risks For Customers

Because crypto balances and login credentials remain unaffected, the immediate risk is not coins being drained directly from the broker, but targeted social engineering using detailed personal data. Attackers can craft realistic emails, calls, or messages that appear to come from Bits of Gold or banks, asking users to verify codes, passwords, or seed phrases, or to move funds to safe accounts.

Bits of Gold explicitly warns customers not to share passwords, verification codes, or private keys, and not to send money or tokens in response to unsolicited requests using their leaked details as context phishing risk guidance. Their trading and stablecoin operations, including the shekel backed BILS token, continue to function, but users should assume their identity footprint may be more exposed.

3. What To Watch Next

Several important facts are still pending. Bits of Gold has yet to confirm the exact number of customers affected, the identity of the compromised software vendor, and whether any of the accessed records have been used in scams. Regulators and cybersecurity firms are now involved, so further details and potential enforcement or guidance may follow.

For crypto users, the broader pattern matters. Recent breaches at hardware wallet and shipping providers show that surrounding services, not just exchanges or wallets, can leak sensitive data. Watching for follow up notices, new scam patterns that reference Bits of Gold, and any shift in Israeli regulatory expectations around third party vendors will help gauge how serious this incident becomes.

Confidence: high because the description is based on direct company disclosures and multiple aligned news reports.

Conclusion

Bits of Golds data leak is serious for privacy and scam risk, even though customers crypto funds and passwords remain intact. The compromised third party system underscores how vendor security can affect brokers and their clients.

For affected users, the practical concern is smarter phishing, not immediate asset loss, so the most important response is tightening personal security habits while awaiting clearer numbers and regulator backed guidance.