The security walls of Israel’s first licensed crypto broker have just been breached, and the vulnerability came from the outside. Bits of Gold announced an investigation into a cyber incident on August 16, 2026, following the discovery of unauthorized access that penetrated a third-party support and data analysis system they use.
This attack directly targets user privacy. The list of information potentially falling into the hands of hackers includes full names, ID numbers, email addresses, phone numbers, and IP address histories. Furthermore, customer bank account details along with their public crypto wallet addresses were also compromised in this data leak.
Nevertheless, the fund storage fortress remains intact. Bits of Gold assured that all user digital assets are safe in their place and unaffected by this incident. Other crucial information, such as account passwords, scans of official identity documents, and complete credit card details, including CVV codes, were completely untouched by the hackers.
What Remains Unanswered
Various reports circulating in the market suggest that the incident impacts approximately 200,000 customers. Given that the platform’s total user base exceeds 300,000 people, more than half of their customer base is potentially on the hackers’ radar.
However, the exact extent of this data loss remains unclear. Bits of Gold has not yet confirmed the number of victims, and the exact identity of the third-party software provider that served as the entry point for the hackers has not been publicly disclosed. The breach was later revealed not to be an isolated incident, but rather part of a broader cyberattack campaign affecting hundreds of other companies in various countries.
Bits of Gold’s reputation in the Israeli crypto industry has drawn immediate attention to the incident. As holder of financial service license number 56716, this entity is the first active crypto company to secure a permanent permit from Israel’s capital market authority. On April 27, 2026, the broker also received regulatory approval to issue BILS, a stablecoin token directly pegged to the movement of the Israeli shekel.
Awaiting Follow-Up Attacks
Although customers’ digital wallets were spared from direct breaches, the real threat has now shifted to the realm of social engineering. The authentic personal data that has already leaked has become the primary raw material for launching follow-up phishing attacks.
Armed with accurate names, phone numbers, and bank account details, scammers can impersonate customer service or official authorities with a convincing degree of accuracy. For customers, while the theft of crypto assets may have failed from within the system, the accumulated leaked data ensures they remain targets for much more targeted manipulation out there. Reported by crypto.news.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
