A hacker has stolen the personal data of roughly 200,000 customers from Bits of Gold, Israel’s largest regulated cryptocurrency broker. The breach potentially compromises the platform’s entire user base, a serious blow for a company that built its reputation on regulatory compliance and security.
For a firm that holds the distinction of being the first crypto company to receive a virtual asset service provider (VASP) license in Israel, this is the kind of headline that undoes years of careful brand-building in a single news cycle.
What we know about the breach
The attack targeted personal data belonging to Bits of Gold’s customer base. The company serves over 200,000 clients in Israel, meaning the breach could affect essentially every user on the platform.
The specific types of personal information compromised have not been publicly detailed. Crypto brokers typically collect extensive identity documents under know-your-customer (KYC) regulations, which can include government-issued IDs, proof of address, and financial information.
Bits of Gold has promoted security features including two-factor authentication and cold storage solutions for digital assets. But cold wallets protect crypto holdings, not the personal identity documents sitting on company servers.
Israel’s crypto pioneer under pressure
Bits of Gold has occupied a unique position in Israel’s crypto ecosystem. The company received the country’s first VASP license from the Capital Market Authority back in September 2022, a milestone that positioned it as the gold standard for regulatory compliance in the Israeli digital asset market.
The platform offers shekel and dollar-denominated trading, over-the-counter services, and API solutions for businesses.
In April 2026, Bits of Gold received approval to issue the BILS stablecoin, a digital currency backed 1:1 by the Israeli shekel. The stablecoin was developed in partnership with Solana and Fireblocks, with auditing handled by EY.
The KYC paradox strikes again
Ledger, the hardware wallet manufacturer, suffered a data breach in 2020 that exposed customer names, email addresses, and physical addresses. That breach led to targeted phishing campaigns and even physical threats against affected users.
For Bits of Gold’s 200,000 customers, the concern is similar. Personal data stolen from a crypto broker can be weaponized in phishing attacks, SIM-swap schemes, and social engineering campaigns specifically designed to steal digital assets.