Meitav Trade Suffers Major Data Breach, Exposing Thousands of Israeli Customers

Meitav Trade, an Israeli securities trading company, experienced a severe cybersecurity incident over the weekend due to a security breach in its systems. The company reported to the Israel Securities Authority that approximately 3,000 clients were affected by a leak of personal information, including full names, ID numbers, and bank account numbers. The vulnerability was traced to an external communication interface, an API, operated by a third-party service provider.

During the attack, attempts were also made to breach one-time password (OTP) authentication mechanisms, but these efforts were repelled and did not result in any changes to user permissions. Meitav Trade emphasized that client funds and trading systems remained secure, with no exposure of passwords or sensitive identification documents.

In response to the breach, the company immediately disabled the compromised interface and launched a comprehensive investigation with the involvement of cybersecurity experts and the external provider. Meitav Trade, led by CEO Osher Tubul, plans to directly contact the affected customers. The company anticipates no significant damage to its ongoing operations and expects a negligible financial impact, though it noted that the business outlook could change based on the investigation's findings.