Purse Hack

Purse.io users were the target of hackers who may have gained access and compromised a third-party email service provider used by the company.

The first signs of the theft came to light after a user took to Reddit to report unauthorized withdrawals from the user’s Purse.io wallet:

https://www.reddit.com/r/Bitcoin/comments/3o9ju8/my_purseio_account_was_compromised/

The attack flow:

- users received an email asking for their account passwords to be changed

- soon after, the targeted users also received a withdrawal request (after the compromise of the password)

- moments later, a withdrawal confirmation came along, confirming the theft.

The company stated that 11 users were affected and 10.235 bitcoins were withdrawn without users’ consent. Purse.io confirmed that the compromised users have been reimbursed, and their accounts have since been secured.