Israeli crypto broker breach exposes 200,000 users

TLDR

Israels largest crypto broker, Bits of Gold, has disclosed a major data breach affecting around 200,000 customers, but it says user funds and wallet keys remain safe.

1. Bits of Gold reports hackers accessed a third?party analytics system, exposing personal and banking details for roughly 200,000 customers, not passwords or private keys.
2. The incident fits a wider wave of crypto data leaks at vendors such as SafePal and Trezor, raising phishing and identity theft risks for exposed users.
3. Customers should watch for official guidance and heightened scam activity, while regulators and brokers reassess how they secure third?party providers.

Deep Dive

1. What Was Actually Exposed

Bits of Gold, Israels largest regulated crypto broker, says attackers breached a connected data?analytics provider and stole customer records for about 200,000 accounts. Reports from Coindesk and Yahoo Finance note that exposed fields include names, national ID numbers, emails, phone numbers, IP addresses, bank account details and public wallet addresses, via a compromised analytics platform such as Metabase.

Crucially, the company states that no funds, passwords, private keys, scanned IDs or full card details were accessed, and it has disconnected the affected system and engaged incident?response specialists. A separate report suggests the total user base is around 250,000, so the true number at risk may be between 200,000 and 250,000 customers.

Confidence: moderate, based on multiple aligned reports and the companys own statements, with some uncertainty around the exact customer count and full data categories.

2. User Risks And Sector Trend

Even without direct wallet theft, combining identity data with banking and public wallet info creates a powerful toolkit for targeted phishing, impersonation and social?engineering attacks. Exposed users could see convincing emails or calls referencing real account details or transaction history, designed to trick them into revealing codes or moving funds.

This breach is part of a broader pattern. Recent vendor?linked incidents include the SafePal order?tracking leak affecting nearly 40,000 customers and a Trezor shipping?partner breach, all cited in the same week as the Bits of Gold event. Together they show that third?party plugins and analytics systems are increasingly the weak link for crypto platforms, even when core custody remains secure.

3. What To Watch And Do Next

Bits of Gold says customers do not need to move coins or change wallets, but should treat any unsolicited request for codes, passwords or transfers as suspicious and verify messages only via official apps or websites typed in directly. Cryptoslate reports that Israeli regulators, including the Capital Market Authority and National Cyber Directorate, have been notified, so regulatory follow?up and potential data?protection scrutiny are likely.

For crypto users more broadly, this is a reminder to ask how brokers manage their third?party tooling and what certifications or controls cover analytics and marketing systems, not just custody. Future updates to watch include a fuller incident report from Bits of Gold, any enforcement action or guidance from Israeli authorities, and whether partners such as retail firms adjust their integrations.

Conclusion

This breach shows that even well?regulated brokers can be exposed through their vendor stack, with personal and banking data often at greater risk than on?chain assets. For affected users, the practical focus is on vigilance against tailored phishing and impersonation, while for the market, the lesson is that serious crypto security now includes strict oversight of every external system that touches customer data.