Major crypto data leak affects 200K customers in Bits of Gold breach
A troubling trend for the crypto industry. Who’s next?
Image by Cybernews.
- Bits of Gold, Israel's largest crypto broker, confirmed a data breach affecting roughly 200,000 customers via a support system.
- Exposed data includes names, ID numbers, phone numbers, bank details, and crypto wallet addresses, but not funds or private keys.
- The breach is the third in the crypto industry within a week, following incidents at SafePal and Trezor's fulfillment partner ShipMonk.
- Bits of Gold says customer passwords, credit card details, and ID photos were not compromised, and no fraudulent misuse has been detected.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Bits of Gold, Israel’s largest crypto broker, has become the victim of a massive data breach, affecting roughly 200,000 customers.
According to the Tel Aviv-based company, a hacker gained access to a support analysis system.
With the help of an external cybersecurity firm, Bits of Gold’s security team immediately launched an investigation into the incident.
Primary findings suggest that the attacker most likely exfiltrated personal information, including names, email addresses, phone numbers, ID numbers, IP addresses, bank account information, and a public crypto wallet address.
There’s no indication that the information has been misused in any fraudulent activities. Despite this, the crypto broker recommends that affected customers be vigilant against phishing attempts, impersonation, and other suspicious activities.
“Your digital assets and funds are safe and were not involved in the event. Also, we do not hold our customers’ private keys, full credit card details, or CVV codes, so this information was not involved in the incident. Additionally, your account access passwords and your ID photo were not disclosed,” Bits of Gold said in a press release.
The crypto broker adds that it will never ask its customers to provide a password, verification code, or private key. In addition, customers will never be asked to transfer money or digital assets to other crypto wallets.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
According to Bits of Gold, the incident was part of a large-scale cyberattack that also affected other companies around the world. As a matter of fact, this is the third data breach within the crypto industry in a week.
First, there was SafePal, a crypto hardware wallet company that had to notify 39,798 customers that their personal information had been stolen in a recent data breach.
Due to a vulnerability in an order-tracking plug-in, a threat actor was able to steal names, emails, shipping addresses, phone numbers, and purchase details, which are currently listed on the dark web.
Last week, customers of Trezor wallet were notified of a data breach involving their personal information. ShipMonk, a fulfillment partner of Trezor, suffered unauthorized access to its systems, affecting nearly 14,000 Trezor customers.
