Meitav Trade Reports Data Breach Affecting 3,000 Client Accounts via Third-Party API

Meitav Trade reported a data breach after an external party exploited an API vulnerability via a third-party vendor, exposing personal information of 3,000 customers. The incident was uncovered after customers received unexpected one-time SMS verification codes on Saturday, September 26.

Incident Details and Impact

According to the company, the external party managed to extract personal details, including full names, ID numbers, bank account numbers, and beneficiary details where applicable. However, Meitav Trade emphasized that investigations so far indicate no access was gained to customer funds or accounts, and trading systems, passwords, financial data, or identification documents remained secure. The company stated it blocked access to the vulnerable interface and will directly notify affected clients.

"Meitav Trade confirmed that customer funds, trading systems, and passwords were not exposed during the external data breach via the third-party API vendor."

Technological Challenges and Growth

This security event follows several recent technological glitches at Meitav Trade. Earlier in September, customers briefly saw zero balances due to a display error caused by a data update. Furthermore, in March 2025, trading systems for both Meitav Trade and IBI experienced hours of downtime due to a communication failure at technology provider FMR.

Despite these technical hurdles, Meitav Trade continues to experience rapid growth as Israel's largest trading platform. By the end of June 2026, the company managed 130,000 customer accounts, adding approximately 19,000 new accounts in the first half of the year. Total client assets on the platform reached roughly 46 billion shekels, up from 41 billion shekels at the end of 2025 and 32.9 billion shekels at the end of 2024.