Israeli broker breach exposes 200,000 crypto users

TLDR

Israels largest crypto broker Bits of Gold suffered a third?party data breach affecting around 200,000 customers, exposing personal and financial data but not customer funds or private keys.

1. Bits of Gold says a hack of an external analytics system leaked names, IDs, contact details and bank information for roughly 200,000 users, while crypto assets remain safe.
2. The exposed data greatly increases phishing, identity theft and even physical targeting risk and comes amid similar leaks at SafePal and Trezor.
3. The breach is still under investigation, with regulators notified and some partner services, like a Bitcoin purchase app, temporarily paused, so users should expect more guidance and scrutiny.

Deep Dive

1. Scope Of The Breach

Bits of Gold reported that hackers accessed a third?party data analytics provider and stole customer records for about 200,000 users, including names, national ID numbers, emails, phone numbers, IP addresses, bank account details and public wallet addresses, according to CoinDesks coverage of the breach.

The broker and multiple reports stress that funds, passwords, private keys, CVV codes and scanned ID documents were not touched, meaning the incident is about data exposure rather than direct asset theft. Yahoo Finance notes the firm serves over 250,000 customers, so most of its user base may be affected, though final numbers vary between approximately 200,000 and a possible 250,000.

CryptoSlate adds that the vulnerable system is linked to a specific Metabase software exploit, with Bits of Gold disconnecting the affected system and bringing in external incident response specialists.

2. Risks For Crypto Users

The combination of identity data and bank information is particularly sensitive, because attackers can blend personal details with financial context to run convincing phishing, account?takeover and impersonation campaigns. CoinMarketCaps community analysis highlights that similar leaks have already led to increased concern over targeted fraud and physical threats.

This breach also lands in a broader pattern of crypto?related data exposures, including a SafePal leak that revealed order and address data for roughly 40,000 hardware?wallet customers and a separate Trezor vendor breach, as reported by multiple outlets. Together, these show that even self?custody users can be exposed through ancillary services.

3. What To Watch Next

CryptoSlate reports that Israeli energy and retail group Paz temporarily halted its Bitcoin purchase integration with Bits of Golds Yellow app as a precaution, illustrating how one breach can ripple through connected services even when funds are safe. Regulators, including Israels Capital Market Authority and the National Cyber Directorate, have been notified, increasing the chances of follow?up guidance and enforcement.

For affected users, the key signals to watch are 1) formal updates from Bits of Gold detailing which fields were exposed, 2) any regulatory advisories on monitoring accounts and identity misuse and 3) confirmation that the Metabase vulnerability has been fully remediated across the brokers vendor stack.

Confidence: high because multiple independent reports and company statements align on the cause, data types exposed and the fact that funds and private keys were not compromised, even though the exact final scope is still being refined.

Conclusion

This breach shows that a regulated broker can protect on?platform crypto balances yet still leave customers exposed through third?party data systems. The real danger is that detailed identity and banking information now exists in criminal hands, raising fraud and personal security risks long after the incident is contained technically. For crypto users, the takeaway is that counterparty and vendor security around personal data matters as much as private key storage, and future updates from Bits of Gold and regulators will help clarify how well that lesson is absorbed.