Security incident at Meitav Trade: customer information exposed, including ID numbers and bank accounts
Meitav Trade reported a security incident in which an external party exploited an exposure in a third-party API interface and extracted personal customer information, including full names, ID numbers, and bank account numbers. The incident was discovered after customer reports of unexpected SMS messages. The company blocked the interface and emphasizes that no funds or accounts were harmed.
Meitav Trade reported a data security incident in which an external party exploited a vulnerability in a third-party API interface and managed to extract personal customer information. The exposed information includes full names, ID numbers, bank account numbers, and beneficiary details, if any. The incident was discovered on Saturday, September 26, 2026, after customers reported receiving SMS messages containing a one-time verification code for system login, even though they had not requested it. Following the investigation, Meitav Trade blocked access to the interface and ceased its use. According to the company, 3,000 SMS messages were sent to customers as a result of the incident, and several attempts were made to change the phone number to which the verification code was sent, but these were unsuccessful. The company emphasizes that no access to customer funds or accounts was possible, and no trading systems, passwords, financial information, or identification documents were exposed. Meitav Trade stated that it will notify customers whose personal information was extracted. The incident adds to a series of technological malfunctions at the company: in early September 2026, customers experienced a display glitch where account balances showed as zero; in March 2025, the trading systems of Meitav Trade and IBI were shut down due to a malfunction at provider FMR. These events occur against the backdrop of Meitav Trade's rapid growth, as the largest trading platform in Israel, with 130,000 customer accounts as of June 2026 and assets totaling approximately 46 billion shekels.