Connect with us

Hi, what are you looking for?

Crypto

SEC Cybersecurity Protocols Lacking Two Weeks Before X Hack

Last updated:

| 2 min read

The United States Securities and Exchange Commission (SEC) received a report from the Office of Inspector General (OIG) alleging that its cybersecurity program was lacking just two weeks before the commission’s X account was hacked on January 9, according to Fox Business reporter Eleanor Terrett.

SEC Received OIG Report Two Weeks Before X Hack


Eleanor Terret tweeted on May 6 about the issue, highlighting a December 2023 OIG report, an independent evaluation by contractor Cotton & Company Assurance and Advisor concluded that the federal regulator fell short of “effectively mitigating security weaknesses.” 

“To improve the SEC’s information security program, we urge management to take action to address areas of potential risk identified in this report,” the report read.

The nearly 30-page document highlighted a list of much-needed improvements to the SEC’s security protocols, including maintaining its vulnerability disclosure policy and logging meeting requirements.

“I am pleased your report identified improvements to SEC’s information security program across several domains, such as risk management, supply chain, security training, and continuous diagnostics and monitoring,” the SEC’s Chief Information Officer David Bottom said in a December 2023 letter to OIG. “The SEC’s Office of Information Technology (OIT) continues to focus on improving maturity throughout the program, even though not all metrics are evaluated and scored each year.”

After receiving OIG’s report on its underperforming security program, the federal agency was ordered to submit an action plan within 45 days. The SEC was hacked shortly after on January 9 when an authorized party gained access to the commission’s X account and posted a fake spot Bitcoin ETF approval announcement.

Cybersecurity Program Questioned Following Report


According to CoinDesk, the hack resulted in $90 million in liquidations, prompting market manipulation concerns.

“Deeply concerned with this alleged hack of the SEC’s Twitter account,” Congresswoman Anne Wagner stated. “This is clear market manipulation that impacted millions of investors. I plan to get more answers from Chair Gensler on this incident.”

The federal agency was later found to have not enabled two-factor authentication, allowing an unknown party to access the commission accounts via a SIM-swapping attack.

“Access to the phone number occurred via the telecom carrier, not via SEC systems,” the SEC said in a statement shortly following the hack. “SEC staff have not identified any evidence that the unauthorized party gained access to SEC systems, data, devices, or other social media accounts.”

Despite its obvious vulnerabilities, it is unclear if or when the federal commission will face reprimand for the incident.



Read the full article here

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

You May Also Like

News

Genesco Inc. (NYSE:GCO) Q3 2025 Earnings Conference Call December 6, 2024 8:30 AM ET Company Participants Darryl MacQuarrie – Senior Director of FP&AMimi Vaughn...

News

Listen below or on the go on Apple Podcasts and Spotify Handling market volatility with long-term dividend growth investing. Prioritizing future dividends over immediate...

News

This article was written by Follow Cash Builder Opportunities (aka Nick Ackerman) is a former fiduciary and a registered financial advisor with 14 years...

News

This article was written by Follow True Orion is comprised of two notions. Orion, the ancient mythical hunter, and truth. The neverending pursuit for...