Data Breach at Bits of Gold
Bits of Gold, Israel's largest crypto broker, reported a data breach affecting 200,000 customers. The breach occurred when a hacker gained unauthorized access to a third-party data analytics network, exposing customers' names, national ID numbers, emails, phone numbers, IP addresses, bank account details, and public wallet addresses.
According to the company, no funds, private keys, passwords, CVV codes, or scanned ID documents were exposed. The attack is believed to be part of a broader global incident that hit other companies simultaneously.
Bits of Gold said its initial findings indicate that the attack was carried out by a hacker who gained access to a third-party vendor's system, which then exposed customer data.
The company has begun a comprehensive investigation of the incident, with the assistance of a company specializing in cyber incident investigation and response. Bits of Gold assured customers that their digital assets and funds are safe and were not involved in the incident.
This is the third data breach reported within the crypto industry in the last week, following similar attacks on SafePal and Trezor wallet customers.
Background
Bits of Gold was founded in 2013 and was the first crypto company in Israel to receive a permanent Financial Services Provider license. The company has over 250,000 customers and holds SOC 2 Type 2 certification.
Security Measures
Bits of Gold told customers that it would never ask for passwords, verification codes, private keys, or fund transfers. The company's security measures include blocking access and disconnecting systems from information sources once a breach is detected.
Response
The company's security team is working closely with a cyber incident investigation and response company to determine the cause of the breach and to prevent similar incidents in the future.
Conclusion
Bits of Gold's data breach highlights the importance of robust security measures in the crypto industry. The company's commitment to customer safety and security is reassuring, and its efforts to investigate and prevent future breaches are commendable.