Why did Pocket Bitcoin expand the number of affected customers to 5,411?

Pocket Bitcoin said its completed forensic investigation identified two affected groups, covering 5,120 customers in bank transaction lists and 291 customers in partner-bank correspondence.

What data was exposed for the 5,120 Pocket Bitcoin customers?

Pocket Bitcoin said records for 5,120 customers contained names, residential addresses, transfer amounts and transaction dates, with some lists also containing the IBAN connected to a transfer.

What information was potentially exposed for the 291 Pocket Bitcoin customers?

Pocket Bitcoin said correspondence involving 291 customers could contain names, postal addresses, public Bitcoin addresses, identity document copies and source-of-funds records, with the information varying between customers.

Was customer Bitcoin affected by the Pocket Bitcoin incident?

Pocket Bitcoin said customer Bitcoin and private keys were not compromised because it operates as a non-custodial service and does not hold customers’ private keys.

Cryptocurrency

Image for illustrative purposes only. Not a real photo.

Pocket Bitcoin expands breach to 5,411 customers

Q: What is Pocket Bitcoin doing after the security incident?

Pocket Bitcoin said it closed the vulnerability, installed additional safeguards, notified data protection authorities in Switzerland and Liechtenstein, filed a police report and is reviewing how compliance records are stored and transferred.

Written by Heidi Cuthbert Published Sep 4, 2026, 8:24 AM

Pocket Bitcoin said its August security incident affected records linked to 5,411 customers.
The exposed data included bank transfers, addresses and, in some cases, IBANs and identity documents.
The company said customer Bitcoin, private keys and core databases were not compromised.

Pocket Bitcoin said its August security incident exposed records linked to 5,411 customers across two data groups.

The larger group covered 5,120 customers whose bank transaction lists contained names, addresses, transfer amounts and dates.

A second group of 291 customers had correspondence that could include identity documents, public Bitcoin addresses and source-of-funds records.

“As things stand, we have no indication that any of the affected information has been misused,” Pocket Bitcoin said.

The exposed records came from copied support-system backups containing compliance correspondence and bank-generated lists, rather than the company’s core databases.

Pocket Bitcoin said it does not hold customer private keys, while Bitcoin balances remained inaccessible and its buying and selling services continued normally.

The company notified data protection authorities in Switzerland and Liechtenstein, filed a police report, closed the vulnerability and added further safeguards.