News - Israeli crypto broker Bits of Gold discloses breach tied to third-party software attack

Bits of Gold, Israel’s largest regulated cryptocurrency broker, has told customers that a breach of a vendor system may have exposed personal and financial data, part of a wider software-supply-chain attack hitting hundreds of companies worldwide.

Bits of Gold, a Tel Aviv-based cryptocurrency broker holding financial services license 56716 from Israel’s Capital Market, Insurance and Savings Authority, notified customers on Aug. 16 that unauthorized access had been found in a third-party system the company uses for customer support and data analysis. The company said it detected the intrusion several days before the notice, cut off the compromised system from its data sources, and alerted regulators.

The breach traces back to a software vendor used by Bits of Gold, not a direct strike on the broker’s own network. Bits of Gold said it was one of potentially hundreds of businesses worldwide caught up in the same attack on the software provider, and that available information does not indicate the company was deliberately singled out. The identity of the software vendor has not been made public.

An initial internal review found that intruders may have reached names, national identification numbers, email addresses, phone numbers, IP addresses, bank account numbers and public cryptocurrency wallet addresses tied to customer accounts. Bits of Gold said digital holdings, account passwords, scanned identification documents, full card numbers and card security codes were not affected, noting that it does not store customers’ private keys or complete card data. The company said it has so far found no sign that any of the exposed data has been used maliciously.