Meitav Trade Reports Data Breach After Cyberattack Attempt

Meitav Trade, an investment firm with approximately 134,000 clients, experienced a cyberattack attempt over the past weekend. The company reported on Tuesday that around 3,000 customers received unsolicited one-time verification codes via SMS messages. The breach was discovered when customers reported receiving these codes without initiating any action. Meitav Trade launched an investigation with its external system provider and found a vulnerability in an API interface managed by the provider. Access to this interface was immediately blocked, halting further unauthorized activity. While the attack involved attempts to change customer phone numbers for verification codes, these were unsuccessful. However, an external party managed to exploit a function to extract personal information from a limited number of accounts. This data included full names, ID numbers, bank account details, and beneficiary information where applicable. The company emphasized that client funds, trading accounts, passwords, financial data, or identification documents were not compromised. Customers whose personal information was accessed will be notified. Meitav Trade operates an off-exchange trading platform.