Online Trading Firm Mitbestrade Suffers Data Breach, Personal Client Information Exposed

Mitbestrade, an Israeli online trading platform, has reported a significant data security incident where personal information of approximately 3,000 clients was accessed by an external party. The breach was first detected on Saturday, September 26, when the company received reports of unsolicited one-time password (OTP) text messages being sent to clients. Investigations conducted with an external vendor revealed a vulnerability in an API interface managed by the vendor, which allowed the unauthorized access.

The compromised data includes full names, ID numbers, bank account numbers, and beneficiary details. While the company stated that no access was gained to client funds, trading systems, passwords, or financial data, the exposed personal information is considered sensitive and can be used for phishing and impersonation scams.

Mitbestrade has blocked access to the compromised interface and claims that further unauthorized activity was prevented. The company is notifying affected clients individually and estimates that the incident will not have a material impact on its financial results. Security experts recommend that affected clients remain vigilant regarding suspicious communications and monitor their accounts for any unusual activity.

The incident comes at a time when Mitbestrade, part of the Meitav group, has seen strong financial performance, but it follows a period of operational challenges. These include a trading system outage in March 2025 that affected multiple brokers and a previous instance where Meitav was ordered to refund clients due to improper management fee increases.