The data of 250,000 customers at risk: what leaked from Bits of Gold and how customers should act

Bits of Gold reported a data security incident in which personal details of about 250,000 customers were exposed, following a cyberattack on the analytics provider Metabase. The company emphasizes that customer funds were not affected, but names, ID numbers, phones, and crypto wallet addresses leaked. The main danger is targeted phishing, and customers are required to be highly vigilant.

The Israeli crypto company Bits of Gold reported yesterday a data security incident in which personal details of about 250,000 of its customers were exposed, as part of a broad cyberattack on an external analytics service provider, Metabase. The company emphasizes that customer funds and cryptocurrencies were not affected, but personal details that could be used for targeted fraud attempts leaked. The exposed information includes full names, ID numbers, phone numbers, email addresses, IP addresses, bank account details, and public crypto wallet addresses. No login passwords, credit card numbers, CVV codes, or ID card scans were exposed. The main danger is a wave of social engineering and targeted phishing attacks, with impersonation of company representatives, banks, or law enforcement. Customers are required to avoid clicking on suspicious links and to avoid providing verification codes or private keys. Bits of Gold is the first active company among nine that received a license to trade cryptocurrencies from the Capital Market Authority, and it is supervised by it. The company employs about 55 employees and recently signed a cooperation agreement with the Paz Group for purchasing coins via the Yellow wallet. The Capital Market Authority and the National Cyber Directorate are checking whether additional entities were exposed to the security vulnerability.