2026 Bits of Gold — third-party analytics breach; ~200,000 customers (IDs/bank details)
Data compromised
About 200,000 customers: name, national ID number, email, phone, IP address, bank account details, public crypto wallet address. Funds, private keys, passwords, CVV, and scanned ID photos NOT involved per Bits of Gold.
Technical writeup
Verified company disclosure — August 16, 2026. Bits of Gold (Tel Aviv) published a Hebrew security update stating unauthorised access to a supporting data-analytics system several days earlier, framed as part of a wider cyber incident that also affected other companies. On detection the broker blocked access and disconnected the system from information sources. Exposed fields per company/CoinDesk: name, Israeli national ID, email, phone, IP, bank account details, public wallet addresses for roughly 200,000 customers. Not involved: funds/digital assets, private keys (broker says it does not hold them), passwords, full card numbers/CVV, scanned ID photos. IR firm engaged; authorities notified; trading continued. Vendor not named in the public post. Distinct from same-week SafePal order-tracking and Trezor/ShipMonk shipping incidents.
Root cause
Unauthorised access to a third-party data-analytics system used by the broker; company says it was part of a broader multi-company incident
References
- https://blog.bitsofgold.co.il/security-update-august-26/
- https://www.coindesk.com/tech/2026/08/17/israel-s-largest-crypto-broker-bits-of-gold-hit-by-data-breach-affecting-200-000-customers
- https://databreaches.net/2026/08/17/israels-largest-crypto-broker-bits-of-gold-hit-by-data-breach-affecting-200000-customers/