Pocket Bitcoin data breach affects more than 5,400 customers

The Swiss Bitcoin service provider Pocket Bitcoin reports that a security incident in August exposed the data of more than 5,400 customers. This is according to an update issued after the investigation was completed. For a group of 5,120 customers, the exposed data includes names, addresses, bank transfer amounts and dates, and in some cases also IBAN numbers. A smaller group of 291 customers had even more sensitive information exposed, possibly including identity documents, source of wealth declarations, Bitcoin addresses and residential addresses.

In brief:

• The data breach at Pocket Bitcoin affects a total of more than 5,400 customers in two groups
• Bitcoin balances and private keys have not been compromised; the leak only concerns supporting systems
• The incident has been reported to the data protection authorities in Switzerland and Liechtenstein, and to the police

Leak via customer service system, no Bitcoin balances affected

Pocket Bitcoin states that the customer database and transaction database themselves were not compromised. The leaked data comes from bank correspondence and transaction lists that were stored in the affected customer service system.

According to the company, Bitcoin balances and private keys were never at risk. Pocket Bitcoin operates as a non-custodial service and never stores users’ private keys. There are currently no indications that the leaked data has been misused.

Affected customers receive personal email

All affected customers have been individually informed by email about what was exposed in their specific case. According to Pocket Bitcoin, those who have not received an email fall under the first communication of 22 August, which stated that only customer service data had been affected.