Bits of Gold Investigates Possible Cybersecurity Breach
Bits of Gold, a regulated cryptocurrency brokerage based in Israel, is currently examining a possible cybersecurity breach that might have put customer personal and financial data at risk. The issue arose from unauthorized entry into a third-party support and data analysis system utilized by the firm. On August 16, the company alerted its customers about the incident, promptly restricting access, severing the compromised system’s connections to other data sources, and informing the necessary authorities, as reported by Calcalist.
Details of the Breach
According to the firm’s preliminary evaluation, it appears that certain personal information may have been accessed, including clients’ names, identification numbers, email addresses, phone numbers, IP addresses, bank account details, and public cryptocurrency wallet information. However, the company has stated that critical sensitive details such as digital asset information, passwords, scanned ID documents, full credit card numbers, and CVV codes remain secure.
Although Bits of Gold reassures its clients that there has been no evidence of misuse of the exposed data, the breach seems linked to a larger cyber event involving the software provider they use along with numerous other corporations globally. Calcalist highlighted that potentially hundreds of firms could be impacted by this wider security incident, which doesn’t appear to have specifically intended to target Bits of Gold. The identity of the software provider involved has not been disclosed in the reports reviewed.
Impact on Customers
Reports released on Sunday suggested that around 200,000 customers might be affected by this breach; however, this figure should be viewed with caution. The official notice to customers did not confirm the number of records accessed, and while Bits of Gold claims a customer base exceeding 300,000, the company has not verified the estimate of 200,000 impacted individuals.
The greatest immediate threat to customers is not from direct theft of their cryptocurrency, but rather from social engineering tactics. Exposed details like names, phone numbers, and email addresses could potentially enable scammers to create more convincing communications posing as Bits of Gold or other financial institutions. In light of this, Bits of Gold has issued a cautionary notice urging customers to be vigilant against phishing attempts and to refrain from sharing passwords, verification codes, or private keys, as well as from transferring funds or digital assets in response to unsolicited contacts.
Ongoing Concerns in the Cryptocurrency Sector
The incident adds to ongoing concerns within the cryptocurrency sector regarding data leaks, following another notable breach reported by crypto.news, where ShipMonk exposed the personal information of over 13,000 Trezor clients, raising similar fears about targeted phishing attacks.
Company Background and Response
Bits of Gold operates under a financial services license (No. 56716) and is recognized as the first active cryptocurrency firm in Israel to obtain a permanent license from the Capital Market, Insurance and Savings Authority. This year, the company intensified its regulatory activities by introducing BILS, a stablecoin pegged to shekels, which received approval for issuance and distribution after a two-year regulatory sandbox period that concluded on April 27.
Currently, Bits of Gold’s security response team is undertaking a detailed investigation alongside a specialist firm focused on cyber incident management while continuing to oversee its systems. The relevant authorities have been informed, and the company assures customers that operations remain unaffected and that no immediate action on their accounts is necessary. Future updates will clarify the number of affected customers, the identity of the compromised software provider, the specific extent of the data accessed, and whether there is any sign of data misuse. Until then, the reported figure of around 200,000 impacted customers and the magnitude of the breach remain unverified by Bits of Gold.
