A hacker compromised Unicoin’s Google Workspace (previously G-Suite) account and altered the passwords for all firm workers, locking them out of their company accounts for days.
Unicoin is an asset-backed, audited, and publicly reporting cryptocurrency mission. It’s the official token of the “Unicorn Hunters” enterprise sequence, centered on offering novel funding alternatives.
In a submitting to the U.S. Safety and Exchanges Fee (SEC), the corporate says that after having access to its Google account, the risk actor modified the passwords, thus dnying worker entry to all providers within the surroundings, together with Gmail and Drive.
Unicoin says that it managed to revive entry for its workers to G-Suite about 4 days later, on August 13.
“On August 9, 2024, Unicoin Inc. detected an unknown threat actor had gained access to the Company’s Google G-Suite account and changed passwords of all users of the Company’s G-Suite products (i.e., G-Mail, G-Drive and other related G-Suite functionality), thereby denying access to all users having an “@unicoin.com” e mail handle,” reads the SEC Type 8-Okay submitting.
“On or about August 13, 2024, the company was able to remove the threat actor’s access to the G-Suite accounts and restore access to its internal users.”
Throughout this time, the risk actor may freely entry confidential data current in inside communications.
The corporate continues to be assessing the extent and influence of the incident however has already discovered the next proof of information entry, manipulation, and fraud makes an attempt:
- Discrepancies have been discovered within the private knowledge of workers or contractors throughout the accounting division.
- Proof of compromised communications was discovered, particularly hacked messages and e mail accounts of sure firm managers.
- Id forgery was detected for one of many contractors, resulting in their termination.
Regardless of the breach of the corporate’s cloud surroundings for productiveness and collaboration, Unicoin doesn’t consider that the occasion may have a cloth influence on its monetary standing and has seen no proof of crypto belongings or money losses linked to the occasion.
