Crypto brokers report new customer data breaches

TLDR

Several crypto brokers and wallet providers have disclosed new customer data breaches that exposed personal information but not private keys or funds.

1. Israels regulated broker Bits of Gold and wallet provider SafePal both reported incidents involving leaked customer identity and order data.
2. The main risk is targeted phishing, impersonation and possible identity abuse, not direct theft of crypto assets held on the platforms.
3. Users should verify whether they were affected, harden security, and treat any unsolicited contact as suspicious until confirmed through official channels.

Deep Dive

1. What Has Been Breached

Bits of Gold, a regulated Israeli crypto broker with over 300,000 customers, reported a cyber incident after unauthorized access to a third?party support and data analysis system. Potentially exposed data includes names, ID numbers, emails, phone numbers, IP addresses, bank account details and public wallet addresses, while funds, passwords, scanned IDs and full card data were not affected, and there is no indication of misuse so far according to its notice and coverage by crypto.news.

SafePal, a non?custodial wallet provider backed by Binances venture arm, disclosed a separate breach tied to an authorization flaw in an order?tracking plugin, which exposed order information for about 39,798 customers between March 2025 and April 2026. Leaked fields include names, email and shipping addresses, phone numbers and purchase details, but seed phrases, private keys, wallet passwords and bank data remain secure, as detailed in reporting by CoinDesk.

Both firms say they have fixed the vulnerabilities, notified users and engaged specialist security teams, with SafePal also tightening data retention to 90 days and taking down dozens of phishing sites linked to the breach.

2. Why It Matters For Crypto Users

Even when keys and funds are safe, leaks of identity, contact and banking information create a strong attack surface for scams. With data like names, phone numbers and partial bank details, attackers can impersonate brokers, send highly convincing emails or calls and pressure users into urgent transfers or revealing credentials.

EU regulators have already warned that scammers are exploiting regulatory transitions such as MiCA migrations to impersonate legal exchanges, while incidents like the Bits of Gold breach are cited as examples of third?party exposure in this environment. This combination of broker data leaks and migration?related confusion raises both compliance pressure on platforms and real?world risk for individual users.

3. What To Watch And Do Next

For customers of Bits of Gold or SafePal, the key next steps are to monitor official updates on the confirmed scope, the identity of compromised vendors and any evidence of data misuse, and to use any verification tools the platforms provide to check if your records were affected.

Individually, you can reduce risk by: using strong unique passwords and 2FA for broker accounts, being extra cautious with emails, texts or calls claiming to be from support, and never sharing seed phrases, private keys or one?time codes. Any instruction involving migration, refunds or firmware updates should be verified only via the platforms own app or website that you navigate to manually.

Confidence: high, because multiple independent reports and official disclosures are consistent on what was exposed and what was not.

Conclusion

These new data breaches show that crypto security is not only about protecting wallets, but also about how brokers and vendors handle customer information. While the incidents reported so far do not directly endanger on?platform funds, they materially increase phishing and impersonation risk, making cautious, verified communication and stronger account hygiene essential in the coming weeks.