Phishing Attack Exposes 200,000 Bits of Gold Customer Records

Israel’s largest crypto broker Bits of Gold hit by data breach affecting 200,000 customers. The company confirmed on Tuesday that personal information of about 200,000 users was accessed by an unauthorised party. The breach was discovered on Monday after a routine security audit flagged unusual activity. Bits of Gold said the data exposed includes usernames, email addresses, phone numbers and, in some cases, wallet addresses. No funds were reported as stolen, but the company urged users to change passwords and monitor accounts.

Bits of Gold is a key player in Israel’s fast‑growing crypto market, handling more than 60% of the country’s retail trading volume. The firm has grown quickly since its launch in 2017, attracting a large base of small investors and a reputation for low fees. The incident comes at a time when regulators in Israel and abroad are tightening rules on digital asset exchanges. High‑profile hacks in 2023 and 2024 have pushed governments to demand stronger security and transparency. The breach highlights the risks that come with rapid growth and the need for robust cyber‑defence in the crypto sector.

The company said it believes the breach was caused by a phishing attack that compromised an employee’s credentials. Bits of Gold has notified the Israeli police and the national cyber‑security authority. It also announced that it will provide affected users with free credit‑monitoring services for a year. The firm’s CEO issued a statement saying the incident was “unacceptable” and that the company is reviewing all security protocols. Some users have expressed frustration on social media, demanding quicker communication and compensation. The Israeli Securities Authority has indicated it will review the broker’s compliance with data‑protection laws.

Following the breach, regulators are likely to impose stricter oversight on crypto exchanges operating in Israel. Bits of Gold is expected to submit a detailed report to authorities within the next 30 days. The incident may prompt other exchanges to audit their security measures, potentially tightening industry standards. For Israeli investors, the breach underscores the importance of safeguarding personal data and the need for clear regulatory guidance on cyber‑risk. The event also serves as a reminder that even leading firms can fall short of security expectations, affecting trust in the broader digital‑asset ecosystem.