Israeli broker probes third-party customer data exposure

TLDR

Israeli crypto broker Bits of Gold is investigating a third-party cyber incident that may have exposed customer identity and account data but not funds or passwords.

1. Bits of Gold reports unauthorized access to a vendor-run support and data analysis system, potentially exposing names, IDs, emails, bank details and wallet addresses.
2. The broker says there is no indication of stolen funds or misuse yet, but warns affected customers about heightened phishing and impersonation risks.
3. Key open questions are how many customers were impacted, which software provider was compromised, and whether any of the leaked data is later abused.

Deep Dive

1. What Was Exposed

Bits of Gold, a regulated Israeli crypto broker with more than 300,000 customers, disclosed a cyber incident linked to a global breach of third-party software used for support and data analysis. According to its notice, attackers gained unauthorized access to that external system, not to the core trading or custody infrastructure.

Potentially exposed data includes names, national ID numbers, email addresses, phone numbers, IP addresses, bank account details and public crypto wallet addresses, but not funds, account passwords, scanned ID documents, full card numbers or CVV codes, as the broker emphasized in its statement about the incident (Bits of Gold customer data breach). The exact number of affected customers is still unconfirmed.

Bits of Gold says it has disconnected the affected system, blocked access, informed authorities and brought in a specialist incident-response firm to investigate.

2. Impact On Crypto Users

For now, Bits of Gold reports no evidence that the exposed data has been misused and states that customer funds and crypto assets remain safe in their accounts. Services continue to operate, and the broker is not asking users to take direct account actions.

The main near-term risk is targeted social engineering. With identity data, bank details and wallet addresses, attackers can craft convincing emails, calls or messages that look like legitimate support contacts, pressuring users to share passwords, verification codes or private keys, or to send funds. Bits of Gold explicitly warns customers not to share credentials or move money in response to unsolicited requests.

Bits of Gold also runs BILS, a regulated shekel-pegged stablecoin, so any erosion of trust in its security posture could affect confidence in that product as well.

3. What To Watch Next

Important pending details include a confirmed count of affected customers, the identity of the compromised software vendor, and any future reporting on whether exposed records show up in phishing campaigns or data markets.

This incident fits a broader pattern in crypto where third-party commerce or support systems, rather than wallet key storage, leak customer data. Recent breaches at wallet providers like SafePal also exposed order information while leaving private keys intact, but still increased phishing risk (SafePal data breach).

For crypto users, the practical signal is to watch for unusual communications that reference specific personal details from your broker and to independently verify any urgent request through official channels before taking action.

Conclusion

Bits of Golds probe highlights that the weak points in crypto security often sit in third-party support and analytics systems, not in the on-chain custody layer. The data exposure itself does not appear to endanger customer funds, but it creates a fertile environment for targeted scams. Until the scope and downstream misuse are clearer, the most effective response for users is stricter verification of any contact claiming to be from the broker and a cautious stance toward unsolicited requests involving credentials or transfers.