Bitcoin purchases halted after data breach puts 250,000 crypto users at risk
Israel’s largest regulated cryptocurrency dealer, Bits of Gold, is investigating a data breach that probably uncovered the non-public info of as much as 250,000 clients.
While buyer funds and digital belongings stay safe, the incident prompted Israeli retail and vitality large Paz to briefly halt Bitcoin purchases on its Yellow comfort retailer app.
In an Aug. 16 notice, Bits of Gold confirmed that an unauthorized occasion accessed a supporting data-analysis system a number of days earlier. The agency is Israel’s first licensed digital asset service supplier.
The probably uncovered data consists of names, nationwide identification numbers, cellphone numbers, e-mail and IP addresses, bank-account particulars and public crypto wallet addresses.
Account passwords and identification-document photographs weren’t uncovered. Bits of Gold additionally mentioned it doesn’t maintain clients’ personal keys, full card particulars or CVV codes.

This incident provides to a rising variety of crypto-sector breaches during which attackers have gained entry to buyer info with out straight compromising digital belongings.
In a number of latest circumstances, the uncovered data has included names, e-mail addresses, cellphone numbers, bodily addresses and different figuring out particulars that can be utilized to focus on clients outdoors the affected platform.
That distinction limits the fast risk of on-platform asset theft however can create longer-lasting safety considerations.
This is as a result of private and monetary info can be utilized in phishing campaigns, impersonation makes an attempt, and social-engineering assaults designed to persuade users to disclose credentials, approve transfers, or give up entry to self-custodied crypto.
Paz partnership paused amid vulnerability probe
Following the disclosure, Paz suspended the Bits of Gold integration on its Yellow app, in keeping with an Aug. 17 report by CTech.
Paz mentioned it was not involved that Yellow buyer info had leaked as a result of the 2 functions lack a direct interface. The broader industrial settlement between the corporations stays in impact, whereas Bits of Gold’s major providers proceed to function usually.
CTech attributed the Bits of Gold’s data breach to an lively exploit, CVE-2026-72898, affecting self-hosted releases of Metabase, an analytics software program supplier. Bits of Gold has since blocked entry to the affected system, disconnected it from its data sources, and retained a cybersecurity incident-response agency.
The crypto-focused firm additionally mentioned it has notified related regulatory our bodies, recognized by Israeli media because the Capital Market Authority and the National Cyber Directorate.
Customers have been suggested that no technical motion, comparable to shifting funds or crypto belongings, was required.
However, as a result of contact and monetary info might have been uncovered, users have been urged to stay alert for phishing makes an attempt, refuse unsolicited switch requests, and by no means share verification codes, one-time passwords, or private keys.
The publish Bitcoin purchases halted after data breach puts 250,000 crypto users at risk appeared first on CryptoSlate.
