The SEC’s X account was compromised on January 9, 2024, causing market fluctuations and highlighting cybersecurity concerns. The SEC is working with law enforcement to investigate.
On January 9, 2024, the financial world was briefly thrown into disarray when the U.S. Securities and Exchange Commission (SEC) X account (formerly Twitter) was compromised, leading to the unauthorized publication of tweets falsely claiming that the SEC was mocking Bitcoin exchange had approved. traded funds (ETFs). In this incident, which occurred shortly after 4:00 PM ET, an unknown party gained access to the @SECGov account by taking control of the phone number associated with it. This breach led to one post being made at 4:11 PM ET, announcing the Commission’s supposed approval of spot bitcoin ETFs, followed by another post stating simply “$BTC‘ and liking two unrelated posts.
The SEC responded quickly to the breach, with Office of Public Affairs officials alerting the public via Chairman Gary Gensler’s official X account that the @SECGov account had been compromised and that the messages were unauthorized. This response was part of a broader effort to gain control of the situation, which also included contacting X for assistance in regaining control of the account. It was reported that the unauthorized access was terminated within approximately an hour after it was obtained, between 4:40 PM and 5:30 PM ET.
The fake tweets briefly impacted the cryptocurrency market, causing the price of Bitcoin in particular to spike. This incident underlined the significant impact that social media can have on financial markets and raised concerns about the security of official supervisory accounts on such platforms. It also highlighted ongoing cybersecurity challenges and the importance of robust security measures, such as two-factor authentication, which was reportedly not enabled for the SEC’s X account at the time of the incident.
The SEC has since reaffirmed its commitment to cybersecurity, emphasizing continued assessment of the incident’s impact on investors and the market, and investigation of additional corrective actions. The regulatory agency is working with law enforcement and federal regulatory agencies to investigate the breach and determine appropriate next steps, with the goal of preventing such incidents in the future and maintaining the integrity of its communications.
This event is also a reminder that the SEC does not use social media to publicize official actions; instead, it uses these platforms to amplify announcements on its website. As such, investors and the public are encouraged to rely on the SEC’s official website for accurate and authoritative information about its actions and decisions.
The SEC’s X Account breach highlights the broader implications of cybersecurity in the digital age, particularly regarding the security of social media accounts of leading government agencies. It underlines the need for increased vigilance and advanced security protocols to protect against unauthorized access and prevent the spread of misinformation, which could have far-reaching consequences for financial markets and investor confidence.
Image source: Shutterstock