SignalPlus pledged to reimburse affected users in full after a Nov. 4 cyberattack caused losses below $82,000, leaving users to await a service restoration expected in the coming days.
The company said the breach stemmed from a third party’s compromised Telegram account. Among the affected accounts, some did not have IP allowlisting enabled.
SignalPlus paused its terminal during its response and worked with exchange partners to revoke API keys connected to its service. Binance also revoked the related keys and urged users to review their accounts and wait for confirmation before restoring connections.
EconoTimes previously reported SignalPlus’ account of the intrusion path: a vendor contact’s compromised Telegram account was followed by a forged Microsoft Teams invitation to an engineer, whose computer later provided a route into the company’s internal network.
SignalPlus expects to resume all services in the coming days but has not announced a specific restoration date.
