2026 Pocket Bitcoin — support-system breach; 5,411 customers (291 KYC + 5,120 bank lists)
Data compromised
All notified: support-related exposure. Group 1 (291): names, postal addresses, bitcoin addresses, ID docs, source-of-funds (varying). Group 2 (5,120): names, addresses, transfer amounts/dates, some IBANs. Customer/transaction DB and private keys NOT compromised.
Technical writeup
Verified company notices — August 21 and August 31, 2026. Pocket Bitcoin (Swiss non-custodial) said a sustained cyberattack targeted its support system; attacker access cut off August 16. Investigation found an internal support database of emails and support communications copied. Customer and transaction databases were not compromised. Update: Group 1 — 291 customers whose bank correspondence in support included varying KYC (names, addresses, ID copies, source-of-funds, some bitcoin addresses); Group 2 — 5,120 customers on partner-bank transaction lists (names, addresses, amounts/dates, some IBANs). Combined 5,411. Funds/private keys never at risk. recordsAffected 5411; companyConfirmed true.
Root cause
Cyberattack on support system; exposure of stored bank correspondence and transaction lists