Bits of Gold Warns Customers of Data Breach via Third-Party Support System
Israeli cryptocurrency company Bits of Gold has warned customers of a personal data leak following an incident within a third-party support system. Attackers may have obtained names, national ID numbers, email addresses, phone numbers, IP addresses, and a portion of customers’ financial data.
The Company Detected Unauthorized Access Days Ago
Bits of Gold reported that it discovered the unauthorized access several days ago. Upon discovery, the company immediately severed the connection and disconnected the affected system from its data sources. The incident is currently being investigated by the company’s internal security team alongside a specialized external firm. Bits of Gold has also notified the relevant regulatory authorities.
According to preliminary findings, attackers may have accessed customers’ contact and identification details, bank account numbers, and public cryptocurrency wallet addresses. Bits of Gold states it has not yet found evidence that the stolen data has been used for fraudulent purposes.
Customer Funds and Crypto Holdings Remain Untouched
Customer funds and cryptocurrency holdings were not affected by the breach. According to the company, account passwords, copies of identification documents, complete bank card numbers, and CVV codes were not obtained by the attackers. Bits of Gold also emphasized that it does not store customers’ private keys.
A Broader Incident Affecting a Shared Third-Party Vendor
The incident extended beyond Bits of Gold alone. According to the company, attackers breached the software system of a third-party vendor used by hundreds of organizations worldwide, suggesting that Bits of Gold was likely not the attackers’ primary target. No other affected Israeli companies have been reported so far.
The Main Risk: Phishing and Impersonation
The principal risk facing customers stems from phishing and identity impersonation. Armed with a name, phone number, email address, and other personal details, scammers can convincingly pose as employees of financial institutions or support services. Bits of Gold urged customers not to click suspicious links, never share verification codes, and never transfer money or cryptocurrency at the request of unknown parties.
The company specifically reminded customers that Bits of Gold employees will never ask for a password, verification code, or private key, and will never request a transfer of funds to another cryptocurrency wallet.
About Bits of Gold
Bits of Gold operates within Israel’s cryptocurrency market and holds a license from the Israel Capital Market Authority. The company employs approximately 55 people and serves roughly 300,000 registered customers. Bits of Gold’s services have continued operating normally following the incident.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
