A few days ago, we identified unusual access to our data analysis system as part of a large-scale cyber incident that has also affected other companies worldwide. We immediately blocked access to it and disconnected it from our data sources.
We immediately launched a comprehensive investigation accompanied by a cyber company specializing in this type of incident. Additionally, we have updated the relevant authorities, and we continue to investigate the incident and monitor the systems.
Your digital assets and funds are safe and were not involved in the incident. Furthermore, we do not hold our customers' private keys, full credit card details, or CVV codes, so this information was not involved in the incident. In addition, your account access passwords and the photo of your ID were not exposed.
This article addresses three things: how to identify if a message claiming to be from us is genuine, what to do if someone tries to attack or scam you, and how to contact us.
Did affected customers receive a notification?
Yes. We sent an email to all affected customers from the address [email protected], with the subject line "עדכון חשוב בנושא אבטחת מידע" (Important Update Regarding Information Security).
If you did not receive the message, check your spam folder. Please note that the email address we have for you may be outdated. In any case, the guidelines in this article apply to you as well.
What details were exposed
Based on our investigation so far, the following details may have been exposed:
Full name
IP address
Email address
Phone number
Bank account details (Not login credentials)
Israeli ID number
Public wallet address, where applicable
What details were NOT exposed
Passwords, verification codes, and private keys were not exposed
Photos of ID cards or identification documents were not exposed
Full credit card details or CVV codes were not exposed
Customer funds, accounts, wallets, and digital assets were not exposed
Our investigation is ongoing in collaboration with a company specializing in cyber incident investigation and response. Additionally, we have updated the relevant authorities. If we discover anything further of material importance, we will update the customers directly and update this article as well.
How to know if a message was truly sent by us
Criminals use exposed contact details to impersonate the company from which the information originated. Be vigilant against fake emails, text messages, WhatsApp messages, and phone calls claiming to be on behalf of Bits of Gold. Some of them may look convincing, as they will include your real name, phone number, or your ID number.
The fact that a message contains your correct personal details is not proof that it was sent by us. Bits of Gold will never:
Ask for your password
Ask for a two-factor authentication code or any verification code
Ask you to transfer funds or digital assets to a "safe" wallet, address, or account
Ask you to connect your wallet to a website or app
Send you an offer for an airdrop, gift, or compensation
Ask you to install remote access software
Pressure you to act within a limited timeframe
Regarding our emails: Our alert message is sent from the address [email protected], does not include attachments, and will never ask you to log in using a link appearing in the message. To log into your account, manually type bitsofgold.co.il in your browser or open the app.
Regarding text messages: A text message appearing alongside genuine login codes you have received is not proof that it was sent by us; attackers can manipulate the message to display our name. We never include links in text messages and never ask you to call a number sent to you in a text message. To check on a withdrawal of funds, log into your account.
What to do now
Ensure that two-factor authentication is enabled and use an authenticator app or biometric login instead of SMS codes. Since phone records may have been exposed, SMS codes are the weakest option available to you.
If your public wallet address was exposed, consider using a new address from now on. A public wallet address allows anyone to see the activity and balances associated with it. Avoid consolidating your assets in a single, visible public address.
Do not transfer funds as a result of a message you received. Nothing in this incident requires you to withdraw or transfer funds. Any instruction telling you otherwise does not come from us.
Be vigilant for communications that appear to come from your bank, payment provider, or a government agency. The exposed details can be used to impersonate entities other than us as well.
If you are unsure whether a message genuinely came from us
We will continue to contact you for routine reasons - service updates, account matters, and support. If you are unsure about a message or phone call, do not act on it. Contact us directly via WhatsApp, through the app, or via [email protected], and we will confirm if the communication indeed came from us.
If someone asks you for any of the things mentioned above
If a call or message asks for your password or verification code, tells you to transfer funds or digital assets, or asks you to connect your wallet, this is not a communication from us. Do not cooperate. Hang up the call or do not reply to the message.
Afterwards, update us at [email protected], even if you did not provide any information and did not lose anything.
The fastest way we can protect other customers is by knowing what the attackers are actually doing: what numbers they are calling from, what they are saying, what fake websites and wallet addresses they are using. Every report helps us take down these elements and warn people in a targeted manner. Even a failed scam attempt provides us with information we can use.
Send us any information you have:
The phone number, email address, or account from which the communication came
The date and time
A screenshot or a forwarded copy of the message
What they asked you to do
If you have already transferred funds or shared information, contact us immediately and specify the wallet address, account details, or bank details to which you sent the money, the amount, and the transaction details. The sooner we receive the transaction details, the more we can do to trace it and work with our partners and law enforcement authorities. Also, report this to the Israel Police, and contact your bank directly if bank account details were involved.
If you received a threatening or extortion message
Information of this type is sometimes used to send threatening messages that reference your personal details and demand payment.
Do not reply and do not pay. Report it to the Israel Police and forward the message to us at [email protected] so we can handle it and warn other customers. If you believe you are in immediate danger, call 100.
How to contact us
Suspicious communication, impersonation, threats, or loss related to this incident: [email protected]
Any other matter: WhatsApp at +972 53-461-9112, in-app chat, [email protected]
We will update this article if we discover new material information.