Pocket Bitcoin Breach Exposes Identities of 291 Users Through Wallet Activity

The recent breach at Pocket Bitcoin has unveiled sensitive information of 291 customers, connecting their real-world identities to their Bitcoin wallet activities. This incident expands on the company's earlier disclosures regarding the exposure of customer data.

According to Pocket Bitcoin, the breach not only compromised email addresses and support conversations but also included records that linked names, postal addresses, Bitcoin addresses, and even identity-document copies to public Bitcoin activity. This revelation poses significant privacy risks, as it diminishes the separation between users' offline identities and their on-chain activities.

While the exposed information cannot directly access or move Bitcoin, it raises concerns about phishing and scams. Pocket Bitcoin warned that the leaked details could make fraudulent communications appear more credible, potentially putting users at risk of deception.

The company clarified that it is non-custodial and does not hold customers' private keys, thus ensuring that customer funds remain secure. However, the breach has prompted Pocket Bitcoin to notify affected customers individually about the specific data that was compromised.

In response to the incident, Pocket Bitcoin has reported the breach to the Swiss Federal Data Protection and Information Commissioner and filed a police report. The company has completed its forensic investigation and closed the vulnerability, assuring customers that there is no indication of misuse of the copied information.