Phishing threat: hackers stole client data from Israeli exchange

Israeli cryptocurrency company Bits of Gold reported a data breach: hackers copied names, ID numbers, contacts, and bank details from its support system. The incident is part of a global attack on a software developer. Client assets were not affected, but there is a risk of phishing.

Israeli cryptocurrency company Bits of Gold, a leader in the local market, faced a cyber incident: attackers breached its support and analytics system and copied clients' personal information—full names, ID numbers, email addresses, phone numbers, IP addresses, bank details, and public cryptocurrency wallet addresses. Calcalist reported this. The company stressed that the incident was part of a large-scale international cyberattack on a software developer whose services the platform uses; according to preliminary estimates, hundreds of organizations worldwide were affected. Bits of Gold is the only Israeli company with such consequences, indicating the attack's random nature. Clients' financial assets were not affected: money, cryptocurrency, passwords, ID scans, and full card data with CVV codes remain safe, and the company holds no private keys. The security team detected the access after a few days, isolated the vulnerable segment, enlisted a leading cybersecurity firm, and notified regulators. Bits of Gold is the first company licensed to trade cryptocurrency by the Israel Capital Market Authority, with about 55 employees and a user base exceeding 300,000. Recently, an agreement was signed with Paz Group to purchase coins via the Yellow wallet. The stolen data does not allow account control but creates a risk of targeted phishing attacks. Clients are urged to be vigilant and reminded that employees never ask for passwords or codes.