Swiss Bitcoin Service Pocket Bitcoin Suffers Data Breach Impacting 5,400 Users
Swiss-based Bitcoin trading platform Pocket Bitcoin disclosed a data breach affecting over 5,400 users, with personal information exposed in an attack detected last month. According to a report by Odaily on September 3, the breach compromised a range of sensitive data, including email addresses, customer inquiry records, and bank transfer details.
For some users, the leak extended to copies of identification documents, residential addresses, proof-of-funds materials, and Bitcoin transaction addresses. Pocket Bitcoin confirmed that the scope of exposed data varied by individual and that affected customers were notified about the specific details involved.
The company identified the attack on August 16 and swiftly blocked the hacker’s access to its systems. By August 19, it confirmed that personal data stored in its internal database including emails and inquiry records had been copied. Notably, users’ Bitcoin funds and private keys remained secure, as Pocket Bitcoin operates as a non-custodial service and does not store customer assets or keys.
In response, Pocket Bitcoin patched the vulnerability, implemented additional security measures, and conducted a forensic investigation. The incident was also reported to Switzerland’s federal data protection authority. As of now, there is no evidence that the leaked data has been exploited for malicious activities.
Source: https://en.bloomingbit.io/feed/news/119678
Pocket Bitcoin cybersecurity rating report: https://www.rankiteo.com/company/pocketbitcoin
"id": "POC1788457320",
"linkid": "pocketbitcoin",
"type": "Breach",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '5400',
'industry': 'Cryptocurrency/FinTech',
'location': 'Switzerland',
'name': 'Pocket Bitcoin',
'type': 'Bitcoin Trading Platform'}],
'customer_advisories': 'Affected customers were notified about the specific '
'details involved',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '5400',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Email addresses',
'Customer inquiry records',
'Bank transfer details',
'Copies of identification '
'documents',
'Residential addresses',
'Proof-of-funds materials',
'Bitcoin transaction addresses']},
'date_detected': '2024-08-16',
'date_publicly_disclosed': '2024-09-03',
'description': 'Swiss-based Bitcoin trading platform Pocket Bitcoin disclosed '
'a data breach affecting over 5,400 users, with personal '
'information exposed in an attack detected last month. The '
'breach compromised sensitive data, including email addresses, '
'customer inquiry records, bank transfer details, copies of '
'identification documents, residential addresses, '
'proof-of-funds materials, and Bitcoin transaction addresses. '
'Users’ Bitcoin funds and private keys remained secure as '
'Pocket Bitcoin operates as a non-custodial service.',
'impact': {'data_compromised': 'Email addresses, customer inquiry records, '
'bank transfer details, copies of '
'identification documents, residential '
'addresses, proof-of-funds materials, Bitcoin '
'transaction addresses',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Internal database'},
'investigation_status': 'Forensic investigation conducted',
'references': [{'date_accessed': '2024-09-03', 'source': 'Odaily'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to '
'Switzerland’s federal '
'data protection '
'authority'},
'response': {'communication_strategy': 'Notified affected customers about '
'specific details involved',
'containment_measures': 'Blocked hacker’s access to systems',
'incident_response_plan_activated': 'Yes',
'remediation_measures': 'Patched the vulnerability, implemented '
'additional security measures'},
'title': 'Swiss Bitcoin Service Pocket Bitcoin Suffers Data Breach Impacting '
'5,400 Users',
'type': 'Data Breach'}