Israeli Investment Firm Meitav Trade Reports Major Data Breach

Meitav Trade, an Israeli investment company, announced on Tuesday that a data breach exposed the personal information of approximately 3,000 clients. The breach occurred when an external party exploited a vulnerability in an API interface managed by a third-party supplier.

The incident came to light last Saturday when clients reported receiving one-time verification code text messages without attempting to log in. An investigation by Meitav Trade and its supplier revealed that one of the supplier's interfaces was exposed, allowing unauthorized access.

According to the company, the exposed data included clients' full names, ID numbers, bank account numbers, and beneficiary details where applicable. Meitav Trade emphasized that client funds and accounts remained secure, and trading systems, passwords, financial information, or identification documents were not compromised. The company has since blocked access to the compromised interface and ceased its use.

While several attempts were made to alter the phone number for verification code delivery, these were unsuccessful. Meitav Trade stated that it would notify all affected clients whose personal information was accessed. The company has reported the incident to the Israel Securities Authority.