Crypto Firms SafePal and Bits of Gold Report Data Breaches Affecting Customers

SafePal said the breach did not expose cryptocurrency funds, seed phrases, private keys, wallet passwords, bank account or payment card details, or government-issued identification numbers. The company warned, however, that the exposed data could be used in targeted phishing and impersonation attempts, given that addresses and purchase information were involved. SafePal said it had fixed the vulnerability, added further security measures, and removed more than 30 fraudulent websites and phishing links tied to the incident. It also said it plans to retain customer personal data in its order-processing system for only 90 days going forward.

BleepingComputer reported that a threat actor is now claiming to be selling the stolen SafePal data.

Separately, Israel's largest crypto broker, Bits of Gold, said hackers stole personal data belonging to roughly 200,000 customers after gaining unauthorized access to a third-party data analytics network. According to BitKE, the exposed information included names, national ID numbers, email addresses, phone numbers, IP addresses, bank account details, and public wallet addresses. The company said no funds, private keys, passwords, CVV codes, or scanned ID documents were exposed.

Bits of Gold said it blocked access and disconnected the affected system after detecting the incident, and that its security team had begun an investigation with the help of a firm specializing in cyber incident response. The broker, founded in 2013, has more than 250,000 customers and holds a permanent Financial Services Provider license along with SOC 2 Type 2 certification. Bits of Gold said the breach appeared to be part of a wider global attack affecting multiple companies.

Anthropic Says Russia- and China-Linked Actors Used Claude in Espionage and Weapons Work

The AI company reports it detected and disrupted state-linked groups using its Claude models for hacking campaigns and military development projects.