Pocket Bitcoin breach expands to 5,411 customer records

The company identified two distinct groups of compromised data. The first includes 5,120 customers whose bank transaction lists—containing names, residential addresses, transfer amounts, dates, and IBANs—were accessed. A smaller group of 291 customers faced exposure of more sensitive material, including copies of identity documents, public Bitcoin addresses, and source-of-funds records. Pocket Bitcoin emphasized that its primary customer databases, transaction systems, and private keys remained secure throughout the incident.

Because the exposed files include physical mailing addresses and transaction history, the firm warned of potential impersonation risks. Attackers could theoretically use the authentic transfer details to craft credible phishing attempts via physical mail or telephone. While the company stated there is currently no evidence that the stolen data has been misused, it has notified the Swiss Federal Data Protection and Information Commissioner and the Liechtenstein Data Protection Office. Pocket Bitcoin has also filed a formal police report and advised all affected users to exercise heightened caution regarding unsolicited communications.