SEC Responds to Hack of X Account with Fake Bitcoin ETF Announcement
The U.S. Securities and Exchange Commission (SEC) recently faced a major security breach when its X account was hacked. The incident involved an unauthorized party gaining access to the @SECGov X.com account and issuing a fake announcement claiming that the regulator had approved a spot bitcoin exchange-traded fund (ETF). In response to the hack, the SEC released a statement outlining the details of the incident and the actions taken to address the situation.
Unauthorized Party Hacks SEC’s X Account, Issues Fake Announcement
According to the SEC’s statement, the hack took place on January 9, 2024, shortly after 4:00 pm ET. The unauthorized party gained control over the phone number associated with the @SECGov X.com account, allowing them to log into the account and make posts on behalf of the SEC. In their first post, they falsely announced the Commission’s approval of spot bitcoin ETFs. A second post, which simply stated “$BTC,” was quickly deleted. The unauthorized party also liked two posts from non-SEC accounts using the @SECGov account.
Once the SEC became aware of the situation, staff in the Office of Public Affairs promptly alerted the public via the official @garygensler X.com account. They made it clear that the @SECGov account had been compromised and that the Commission had not approved any spot bitcoin ETFs. The staff deleted the unauthorized post, un-liked the two posts from non-SEC accounts, and made a new post confirming that the account had been compromised. The SEC also requested assistance from X.com to terminate the unauthorized access.
SEC Takes Cybersecurity seriously amid Impacts of Account Hack
The SEC is committed to maintaining robust cybersecurity measures, and the incident has underscored the importance of this commitment. The agency is currently assessing the impact of the hack on the SEC, investors, and the marketplace. The incident has also raised concerns about the security of the SEC’s social media accounts. The staff is actively evaluating whether additional remedial measures are necessary to bolster security and prevent future unauthorized access.
SEC Coordinates with Law Enforcement in Investigation of Account Hack
In response to the hack, the SEC is collaborating with various law enforcement and federal oversight entities to investigate the incident thoroughly. The agency is working closely with the SEC’s Office of Inspector General, the Federal Bureau of Investigation (FBI), and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA), among others. The collaboration aims to identify the individuals responsible for the hack and gather evidence to support possible legal action.
Commission’s Actions are Public on Website, Not Social Media Channels
To ensure accurate and official information, the SEC emphasizes that its actions are made public solely through its official website, www.sec.gov. The Commission does not rely on social media channels to disseminate its announcements. The incident serves as a reminder that social media posts can amplify official announcements but should not be considered as the primary source of information regarding the Commission’s actions. The SEC’s commitment to transparency and accountability is best reflected through its website, where all official announcements are published.
In conclusion, the recent hack of the SEC’s X account has highlighted the importance of robust cybersecurity measures for regulatory agencies. The SEC took swift action to address the unauthorized access and promptly informed the public about the fake announcement. The agency is actively working with law enforcement and federal oversight entities to investigate the incident thoroughly. This incident reinforces the SEC’s commitment to transparency and highlights the need for caution when relying on social media for official announcements.
Analyst comment
Positive news: The SEC responded quickly to the hack of its X account and promptly informed the public about the fake bitcoin ETF announcement. They are actively working with law enforcement to investigate the incident and are evaluating additional security measures. This highlights the SEC’s commitment to cybersecurity and transparency.
As an analyst, the market is expected to remain stable as investors may have been momentarily concerned by the fake announcement but were reassured by the SEC’s swift response and clarification.