Electroneum

Summary

A British cryptocurrency startup experienced a cyber attack shortly after securing $40 million in funding, disrupting investor access to accounts for multiple days. The incident forced the company to temporarily suspend account functionality while addressing the security breach, impacting its user base during the critical post-fundraising period. Operational disruptions centered on denial of account access, though specific technical details or data compromise aspects were not publicly disclosed in available reports.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Electroneum, a United Kingdom-based cryptocurrency startup, experienced a cyber attack in early November 2017 shortly after completing a $40 million (£30 million) fundraising initiative. The incident disrupted access to investor accounts for multiple days, preventing legitimate users from managing their digital assets or conducting transactions through the platform. The attack coincided with a critical growth phase for the company, which had recently attracted substantial capital through its initial coin offering. While technical specifics of the attack vector were not publicly disclosed, the operational consequence was a sustained service outage affecting the platform's account management systems. This disruption occurred during a period of heightened visibility for Electroneum following its successful fundraising campaign.

The cyber attack's primary impact centered on service availability, with investors unable to access accounts for what the company described as "several days" in immediate aftermath reports. No explicit details emerged regarding financial losses from stolen funds or compromised wallets, suggesting the attack may have focused on disruption rather than direct financial theft. The timing proved particularly sensitive given Electroneum's recent market entry and capital raise, potentially affecting investor confidence during a crucial establishment period. The company's public communications confirmed the cyber attack as the cause of service interruptions but did not specify containment measures, forensic findings, or perpetrator attribution. Service restoration timelines and technical remediation steps remained undocumented in available reporting from the incident period.

Sources

Sources available to members: 1 source.