SignalPlus Suffers Cyberattack with Losses Under $82,000, Pledges Full Compensation to Affected Users

According to TechFlow, on November 5, SignalPlus disclosed that its platform was targeted by a cyber attack in the early hours of November 4. The breach originated from the compromise of a third-party technical vendor's contact Telegram account, where attackers used a forged Microsoft Teams meeting invitation to trick an engineer into downloading malicious content, thereby gaining control of the device and infiltrating the internal network. The incident resulted in total losses of under $82,000, and affected users will receive full compensation.

SignalPlus stated that it rapidly contained the breach after detecting anomalous activity, contacted partner exchanges to revoke all associated API keys, and suspended platform services for a thorough security review. The company acknowledged that it did not previously mandate IP whitelisting for exchange API keys, and will implement stricter API access controls, enhance endpoint security, and improve internal permission management. Services are expected to be restored in phases over the coming days. During this period, users may continue to manage their accounts and positions via the official platforms of partner exchanges.