Key Highlights
- Bits of Gold detected unauthorized access to a data analytics support system.
- The company said customer crypto assets and funds were not involved in the incident.
- Private keys, account passwords and full credit card details were not exposed, according to the company.
Bits of Gold, an Israeli cryptocurrency platform, has reported unauthorized access to its data analytics support system as it investigates a cyber incident that may have exposed some customer information.
According to a company security update published on August 16, the incident was part of a broader cyberattack that affected other companies as well. Bits of Gold said it detected the unauthorized access several days earlier, blocked the access and disconnected the affected system from its information sources.
The company said its investigation is continuing with help from an external cybersecurity incident-response firm and that relevant authorities have been notified.
Customer crypto assets were not affected
Bits of Gold said the incident did not involve customers’ digital assets or funds.
The company also said it does not hold customers’ private keys and that account passwords, full credit card details and CVV codes were not exposed.
For crypto users, the distinction is significant because private keys provide control over blockchain assets. Bits of Gold said there was no indication that the unauthorized access allowed attackers to move customer cryptocurrency or gain control of wallets.
The platform said its crypto services continue to operate normally.
Personal and wallet information may have been accessed
Although Bits of Gold said customer funds were not affected, its investigation found that certain personal information may have been accessible through the compromised analytics system.
The company listed potentially exposed information including:
- Customer names
- Email addresses and phone numbers
- Identification information
- IP addresses
- Bank account information
- Public cryptocurrency wallet addresses
Bits of Gold said there is currently no indication that the information has been used.
Public wallet addresses cannot authorize transactions by themselves. However, when combined with personal information, they can give scammers additional details for targeted crypto phishing or impersonation attempts.
Phishing risk emerges as key concern
Bits of Gold warned customers that the potential exposure of personal and wallet information could increase the risk of fraudulent messages.
An attacker who knows a customer’s name, contact information or public wallet address could potentially make a phishing attempt appear more credible.
The company advised customers not to click suspicious links, provide personal information or verification codes, or transfer money or digital assets following unsolicited communications.
Bits of Gold also said it would never ask customers for a password, verification code or private key, or instruct them to move cryptocurrency to another wallet.
Incident comes as Israel expands crypto oversight
The security incident comes against the backdrop of Israel’s expanding regulatory framework for digital assets and stablecoins.
In April, Bits of Gold received approval from Israel’s Capital Market, Insurance and Savings Authority to issue BILS, a shekel-pegged stablecoin, following a roughly two-year pilot on the Solana blockchain. The approval required reserve assets to be held in designated and separate accounts in Israel and placed the rollout under regulatory conditions.
Israel’s regulatory focus has continued to develop since then. In July, the country’s Banking Supervision Department published a draft update covering anti-money-laundering and counter-terrorist-financing risks associated with payment services involving virtual assets. The proposed framework seeks to support the expansion of crypto-related payment services while maintaining financial stability and risk controls.
The Finance Ministry has also published a draft law to establish a dedicated framework for stablecoin issuers, reflecting the country’s broader effort to bring digital asset activity under clearer regulatory oversight.
No evidence of crypto theft reported
Bits of Gold has not reported any theft of cryptocurrency connected to the incident.
The company said customer funds and digital assets remain safe and that there is no current indication that the potentially exposed information has been misused.
It has not disclosed how many customers may have been affected or identified the party responsible for the unauthorized access.
Investigation remains ongoing
Bits of Gold said its security team continues to investigate the incident and monitor its systems with assistance from an external cybersecurity specialist.
The company said it will provide additional information if material findings emerge.
For crypto users, the immediate concern is the possibility of follow-up scams. Unexpected messages involving wallet verification, account security, cryptocurrency transfers or private keys should be treated cautiously, particularly if the sender appears to have access to personal information.
The incident also illustrates an increasingly important distinction in crypto security: protecting digital assets is only one part of safeguarding users. The personal data connected to those assets can also become a target for attackers seeking to gain access through phishing, impersonation or social engineering.
Also Read: Harmony to Discard 141,628 Blocks and 109,126 Transactions in Rollback
