Overview
- Pocket Bitcoin said a support-system backup was accessed in mid-August and its forensic review, completed in late August, confirmed two exposed groups totaling 5,411 customers.
- One group of 5,120 customers had bank transaction lists exposed that included names, postal addresses, transfer amounts, dates and in some cases IBAN numbers.
- A smaller group of 291 customers had correspondence exposed that can include copies of identity documents and public Bitcoin addresses, creating a risk that real-world identities could be linked to on-chain activity.
- Pocket Bitcoin reported no compromise of core customer databases, private keys, or customer Bitcoin balances and says there are no confirmed cases of misuse so far, while regulators and police have been notified and the vulnerability closed.
- The incident highlights how off-chain compliance records and support backups can create long-term privacy harms and increase fraud risk, so affected customers should monitor bank accounts and treat unexpected calls or letters with caution.