Crypto Firms SafePal and Bits of Gold Report Data Breaches Affecting Customers

SafePal said the breach did not expose cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card details, or government-issued identification numbers. The company warned, however, that the exposed data could be used in targeted phishing and impersonation attempts, given that addresses and purchase information were involved. SafePal said it had fixed the vulnerability, added further security measures, and removed more than 30 fraudulent websites and phishing links tied to the incident. It also said it plans to retain customer personal data in its order-processing system for only 90 days going forward.

BleepingComputer reported that a threat actor is now claiming to be selling the stolen SafePal data.

Separately, Israel's largest crypto broker, Bits of Gold, said hackers stole personal data belonging to roughly 200,000 customers after gaining unauthorized access to a third-party data analytics network. According to BitKE, the exposed information included names, national ID numbers, email addresses, phone numbers, IP addresses, bank account details, and public wallet addresses. The company said no funds, private keys, passwords, CVV codes, or scanned ID documents were exposed.

Bits of Gold said it blocked access and disconnected the affected system after detecting the incident, and that its security team had begun an investigation with the help of a firm specializing in cyber incident response. The broker, founded in 2013, has more than 250,000 customers and holds a permanent Financial Services Provider license along with SOC 2 Type 2 certification. Bits of Gold said the breach appeared to be part of a wider global attack affecting multiple companies.

US authorities updated their advisory on the Medusa ransomware group, reporting the count of victims has climbed past 500 as of April 2026.