Bits of Gold Investigates Third-Party Cyber Incident, 200K Affected Claim Unconfirmed

Headline: Israel’s Bits of Gold probes third‑party breach that may have exposed customer data — 200k figure unconfirmed Bits of Gold, one of Israel’s largest regulated crypto brokers, is investigating a cyber incident that may have exposed customer identity and financial information after unauthorized access to a third‑party system the firm uses for support and data analysis. What happened - Bits of Gold told customers on Aug. 16 that it had blocked the intrusion, disconnected the affected system from its data sources and notified relevant authorities. - The company’s preliminary review indicates “there may have been access to certain personal information,” including names, ID numbers, emails, phone numbers, IP addresses, bank account details and public crypto wallet addresses. - Bits of Gold said highly sensitive items appear unaffected: digital assets, account passwords, scanned ID documents, full credit card numbers and CVV codes were not exposed. - So far, the company reports “no indication” the potentially accessed information has been misused. Broader context and scope - The incident appears to be part of a larger cyber event that impacted a software vendor used by Bits of Gold and other companies worldwide. Hundreds of businesses may have been affected, and Bits of Gold is not believed to have been a direct target. - Reports circulating on social media and elsewhere put the potentially affected customer count at roughly 200,000. That number has not been confirmed by Bits of Gold and should be treated cautiously: the firm’s site lists more than 300,000 customers, but the customer notice reproduced by reporting outlets does not specify how many records were accessed. Main risks for customers - The immediate threat is increased phishing and social‑engineering attempts. With names, contact details, bank information and public wallet addresses, attackers can craft convincing impersonation messages that appear to come from Bits of Gold, banks or other services. - Bits of Gold has warned users not to provide passwords, verification codes or private keys and not to send money or crypto in response to unsolicited messages. What the company is doing - Bits of Gold says its security team has launched a comprehensive review with a specialist cyber incident response firm and continues to monitor its systems. Relevant regulators have been notified and services remain operational. - Customers were told no immediate account action is required. The firm hasn’t yet disclosed the identity of the compromised software provider, the exact number of exposed records, or any evidence of data misuse. Why it matters - This is the latest third‑party exposure to touch the crypto sector; a recent ShipMonk breach, for example, exposed personal information for about 13,689 Trezor customers and similarly raised phishing concerns. - For regulated players such as Bits of Gold — which operates under Israeli financial services license 56716 and recently launched the shekel‑pegged BILS stablecoin following a regulatory sandbox — incidents like this test both operational resilience and customer trust. What to watch next - Confirmed number of affected customers - Identity of the compromised software provider - Full scope of accessed records - Any evidence that stolen information has been used for fraud or other criminal activity Practical advice for customers - Be skeptical of unsolicited calls, SMS or emails claiming to be from Bits of Gold or your bank. - Never share passwords, two‑factor codes, private keys or CVV numbers. - Verify any urgent requests through official company channels (do not follow links in unexpected messages). - Consider monitoring accounts for unusual activity and enable strong 2FA methods where available. Until Bits of Gold releases additional details, the widely reported 200,000‑customer figure and the full scale of the incident remain unconfirmed. We’ll update this story as new information becomes available.