The US Securities and Exchange Commission (SEC) has revealed a new development regarding the recent hack into one of their accounts. In an unprecedented move, the hacker, whose identity remains unknown, made use of a SEC employee’s phone number to facilitate a fraudulent social media post. This information offers a more in-depth understanding of the incident that occurred earlier this month.
The unauthorized post, which prematurely declared the SEC’s authorization of a spot Bitcoin exchange-traded fund in the United States, was quickly circulated. This form of misinformation not only violated the integrity of the SEC’s operations but also briefly escalated Bitcoin’s market value. This abrupt uptick acts as a stark reminder of the ripple effects false information can have on financial markets.
As reported on Bloomberg Law, the hacker achieved access to the agency account by ‘taking over’ an employee’s phone number and altering the password. Following the discovery of the fraudulent post on January 9, it was promptly removed.
This breach raises questions regarding the security measures currently employed by the agency. The use of an employee’s personal phone number, in particular, calls for further discussion on the lines separating professional and personal digital spaces in corporate regulatory bodies. It also emphasizes the need for creating robust cybersecurity protocols that could thwart such exploits in the future.
Additional details on the incident, including the identity of the hacker and the potential legal repercussions they may face, are yet to be disclosed. As we await further updates, this incident serves as a stark reminder of the ever-evolving strategies employed by hackers and the corresponding need for foolproof cybersecurity measures, especially in organisations managing sensitive financial information.