Bits of Gold data breach probe: KYC data exposed, no crypto theft

Israel-regulated crypto broker Bits of Gold is investigating a cyber incident that may have exposed customer identity and some financial details. The latest report says the breach originated from unauthorized access to a third-party system used for customer support and data analysis. Bits of Gold says the Bits of Gold data breach did not affect funds, crypto balances, passwords, scanned ID documents, or full credit-card information (including CVV). Potentially exposed data includes names, ID numbers, emails, phone numbers, IP addresses, bank account details, and public crypto wallet addresses. The firm added it found “there may have been access” to certain personal information, and there is “no indication” of misuse so far. Bits of Gold linked the event to a wider global compromise tied to third-party software, not a direct hack of its core systems. It notified customers on Aug. 16, blocked the access, disconnected the affected system from information sources, and informed relevant authorities. Media reports circulated an estimated 200,000 affected records, while the company says its customer base is 300,000-plus. For traders, the immediate risk from the Bits of Gold data breach is not direct wallet theft, but phishing and social-engineering aimed at KYC holders. The broker advised customers not to share passwords, verification codes, or private keys, and not to move assets in response to unsolicited messages. Next steps include a full security review with an incident-response firm and further disclosures on the confirmed scope and any confirmed misuse.