[2015-10-13] Purse.io users’ accounts compromised, hackers stole 10,235 BTC

[milaliss]

Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

[1715020512]

1715020512

[1715020512]

1715020512

[1715020512]

1715020512

[freedomno1]

Thanks I'll add it to the list of big bitcoin thefts
Edit: It looks like someone put a comma where a decimal was needed ...
https://www.cryptocoinsnews.com/purse-io-users-are-targeted-by-hackers-10-235-btc-stolen/
http://siliconangle.com/blog/2015/10/11/purse-io-denies-bitcoin-theft-despite-compromise-and-multiple-users-saying-theyve-been-robbed/

Confirmed SOURCE OP ERROR  CORRECTION Posted Below

Bitcoin startup Purse said today that 10.235 BTC (roughly $2,500) in customer funds were stolen over the weekend during a security incident.

Eleven customers had their accounts emptied, according to Purse representatives, who reported they had covered the bitcoins withdrawn with company funds.

http://www.coindesk.com/customer-bitcoin-stolen-purse-email-breach/

“We actively monitor our customer liabilities against the funds we control. During our downtime, we determined funds we control exceeded customer liabilities [and] the unauthorized withdrawals (10.235 BTC) implying user funds were secure," he said in an email. "Profit from one to two days was used to reimburse the withdrawals.”

[jacee]

Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target? 

[freedomno1]

Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target?  

Fail it was 10 BTC good news though just a small hack

https://blog.purse.io/update-on-unauthorized-password-reset-emails/

Update:  

11 users were affected and 10.235 Bitcoin were withdrawn. All affected accounts have been reimbursed.  Reports of accounts with 2FA being compromised are not accurate. Some users enabled 2FA after they received reset password emails.  Accounts that were affected will soon regain access.  We will publish technical details of the attack in the coming days.

[LiteCoinGuy]

“No accounts with 2FA enabled before the attack were affected. Reports of accounts with 2FA being compromised are not accurate. Some users enabled 2FA after they received reset password emails,” he said.


Some people will never learn. 2FA has to be mandatory.

[Cereberus]

Purse.io users’ accounts compromised, hackers stole 10,235 BTC
Several users of Purse.io, a P2P service provider allowing to shop on Amazon with bitcoins, reported receiving unauthorized password reset emails which was quickly followed by unauthorized withdrawals of money from their accounts.
http://www.coinfox.info/news/3348-purse-io-users-accounts-compromised-hackers-stole-10-235-btc

That's a lot of coins. I wonder where hackers uses all those.  What eo you guys think will be their next target? 

I don't think they use them all in one place. 10 btc wouldn't be hard to distribute and sell off for another currency.
before the revision on the amount: 10kbtc on the other hand   

[tiggytomb]

Was initially shocked as I read 10k Bitcoins stolen!
definitely 2FA is a must nowadays on anything that has value.

[jacee]

Was initially shocked as I read 10k Bitcoins stolen!
definitely 2FA is a must nowadays on anything that has value.

As litecoinguy said above, 2FA should be mandatory and I think it's about time that these sites make it also mandatory for people to use the 2FA. No 2FA then no account. It helps the community and also the company.

[Hugroll]

i got an email couple months ago about purses security being compromised and password change advice. i just decided to stop using purse lol, guess i made a pretty goo decision

[mrkent]

i got an email couple months ago about purses security being compromised and password change advice. i just decided to stop using purse lol, guess i made a pretty goo decision

That email was regarding phishing attempts. Purse hasn't had any other security breaches.

[odolvlobo]

Translation for American readers:

Purse.io users’ accounts compromised, hackers stole 10.235 BTC

[Kakmakr]

Nothing new here, phishing attempts are rampant in the online banking scene too, and nobody post that as headline news on websites. It happens even more than we know, the banks just manage to keep it quite. One of my friends got his accounts cleared with the same thing and spoofed websites.

The thief's will not stop trying, because you use Bitcoin. They will target any platform or payment method with these type of social engineering attacks. If you do not enable 2FA, you expose yourself to a world of trouble.   

[rammy2k2]

Translation for American readers:

Purse.io users’ accounts compromised, hackers stole 10.235 BTC

yes, it was NOT stolen 10k BTC, it was 10 BTC, so nothing huge 

[Digit-0]

Nothing new here, phishing attempts are rampant in the online banking scene too, and nobody post that as headline news on websites. It happens even more than we know, the banks just manage to keep it quite. One of my friends got his accounts cleared with the same thing and spoofed websites.

The thief's will not stop trying, because you use Bitcoin. They will target any platform or payment method with these type of social engineering attacks. If you do not enable 2FA, you expose yourself to a world of trouble.  

yes, i agree with that, i mean that this happened even more than we know, this is curious about why there is no news about that, i mean about obviously the banks just manage to keep it quite, but why there is never news about it, because as you said it happens more often that we are thinking.

yes, it was NOT stolen 10k BTC, it was 10 BTC, so nothing huge 

ahhh just imagine that it was your own 10 btc the one that was stolen, will be it huge?