Cyber incident at crypto company Bits of Gold: potential leak of personal customer data
Crypto company Bits of Gold reported a cyber incident involving the potential theft of customer personal data. The company confirmed that funds and digital assets remain secure.
The crypto company Bits of Gold reported on Sunday a cyber incident that occurred a few days ago, during which customer data was likely compromised. The exposed information includes full names, ID numbers, email addresses, phone numbers, and IP addresses—data that could potentially be used for phishing scams.
The company emphasized that customers' funds and digital assets were not affected. Furthermore, passwords, copies of ID cards, and credit card details remained secure. Customers are advised to be vigilant regarding inquiries from third parties, particularly those attempting to impersonate official entities.
The incident at Bits of Gold is part of a broader global cyberattack targeting a software vendor used by the company. According to estimates, hundreds of organizations worldwide have been affected. At this stage, there is no evidence that other Israeli companies were impacted, suggesting that Bits of Gold was not the direct target of the attack.
In a statement to its customers, the company noted:
"A few days ago, we identified unauthorized access to a data analysis support system. Upon discovery, we blocked access and disconnected the system from data sources. Our security team has launched a comprehensive investigation with the support of cyber incident response experts. We have notified the relevant authorities and continue to monitor our systems."
The company reiterated that it does not store private keys, full credit card details, or CVV codes, ensuring these assets were not involved in the breach. Services continue to operate as usual.
Regarding the scope of the potential leak, the company stated that unauthorized parties may have accessed names, contact details, ID numbers, bank account information, and public crypto wallet addresses. Currently, there is no indication that this information has been misused.
"As a precautionary measure, we recommend being vigilant against phishing attempts and suspicious messages. Avoid providing details to any such inquiry, do not click on suspicious links, and do not share verification codes. Like other financial institutions, we will never ask you to provide a password, verification code, or private key, nor will we ask you to transfer money or digital assets to another wallet," the company stated.
Bits of Gold is the first of nine companies to receive a cryptocurrency trading license from the Israel Securities Authority. It employs approximately 55 people and serves around 300,000 registered customers. Recently, the company signed a cooperation agreement with the Paz Group, enabling currency purchases via the Yellow wallet.
