Published: Friday, August 21st 2026 · Pocket Bitcoin
We have some difficult news to share: Pocket Bitcoin has experienced a security incident. We're genuinely sorry, and we want to be open with you about what data was involved and the steps we're taking right now.
What happened#
Pocket Bitcoin was the target of a sustained cyberattack that unfolded over the course of about a week. As soon as we detected the intrusion, we began actively responding, tightening security measures and applying updates throughout. By Sunday, August 16th, we had cut off the attacker's access to our systems. During our subsequent investigation, we discovered on Wednesday, August 19th, that an internal database containing email addresses and customer support communications had been accessed and copied during this period.
We're sorry#
We know this is unsettling to hear, especially from a company you've trusted with your Bitcoin journey. Your conversations with us were often personal. It hurts us that those conversations were exposed, and we're genuinely sorry for the worry and inconvenience this causes you.
We want you to hear directly from us what happened, what it means for you, and what we're doing about it.
What data is affected#
The exposed data includes:
- Email addresses
- Support conversations (and attachments)
If there was any additional sensitive information in our support conversations, you will receive a personal email at the latest by the end of next week.
What data is NOT affected#
- Bitcoin addresses (and your bitcoin!)
- Customer database (customer profiles and KYC data)
- Transaction history
What we've done so far#
We have redirected all available resources to contain this incident, investigate it thoroughly, and safeguard you from potential harm. We know that data was copied, and we are treating this with the utmost seriousness.
- We contained the incident and closed the vulnerability that allowed access.
- We hardened our infrastructure with additional security protections.
- We launched a forensic investigation, which is ongoing.
- We notified the relevant Swiss data protection authorities and police.
What this means for you#
Because attackers now have real details about your communications with Pocket, they may use this to make phishing attempts more convincing. You’ll maybe receive fake emails, calls, or messages that appear to come from us.
Please keep the following in mind:
- Be cautious of any message that creates urgency or asks you to act immediately
- Be cautious of any message asking for personal information, login details, or your recovery phrase
- Pocket Bitcoin is a non-custodial service and will never ask you for your seed phrase (12 or 24 recovery words), under any circumstance
- If in doubt, verify communications directly through our official website or social channels before responding
- Never enter your wallet recovery phrase into any website, or share it with anyone, including someone claiming to be from Pocket
Is Pocket Bitcoin still safe to use?#
Yes. Pocket Bitcoin is a non-custodial platform. Your private keys never leave your device, and we never have access to your funds. This incident does not put your bitcoin at risk. Buying and selling remains fully operational.
What we're doing next#
We ask for your patience while we continue to investigate this thoroughly. We know something like this can shake the trust you've placed in us, and we hope to earn that trust back through how we handle what comes next. We will publish updates on this page as we learn more, even if there is nothing new to report at a given point. You do not need to change your Pocket account email or take any account action.
Frequently Asked Questions#
Are my bitcoin safe?#
Yes. No private keys were exposed, as we never store them. Your private key stays on your device, and neither Pocket nor an attacker has had access to your funds.
Is it safe to keep using Pocket?#
Yes. Buying and selling bitcoin is unaffected and continues to work normally.
Do I need to change my email address linked to Pocket?#
No. Your account is not compromised, and your funds are not linked to this incident.
Exactly what data of mine is affected?#
Any communication you had directly with our support team through any of the following channels should be treated as exposed:
- Email with team@pocketbitcoin.com
- Telegram
This includes any attachments sent via email, your Telegram handles, and WhatsApp phone numbers. We are still finalising the full scope and will communicate clearly once that assessment is complete.
Could the attackers see my bitcoin address and how much bitcoin I bought or sold?#
No. Purchase and sale details are stored separately and were not part of this incident, unless you personally included such details in a reply to a Pocket email.
What are you doing to prevent this from happening again?#
We've patched the vulnerability identified so far and are continuing a full security review. We'll share relevant updates as the investigation progresses.
Who do I contact with questions?#
We're prioritising the investigation right now, so we'd ask for your patience. Please reach us via our email rather than by phone, since our phone line may be busier than usual. We'll post updates here as soon as we have more to share.
Are messages I send to Pocket support now safe?#
Yes. The vulnerability that allowed this incident has been closed, and we've added further protections since. Any email, chat, or message you send us from now on is not affected by this incident and is handled through our secured systems.