Irish Police Twitter Accounts Hacked in Cryptocurrency Scam Campaign

Two official Twitter accounts belonging to the Irish police force were compromised on Wednesday evening, allowing attackers to post fraudulent cryptocurrency messages to hundreds of thousands of followers. The breach affected the @GardaInfo and @GardaTraffic handles, which are used for public safety and traffic updates by Garda Síochána.

According to Graham Cluley, an unauthorized third party accessed these accounts and posted messages claiming that followers were eligible to claim free cryptocurrency through an airdrop. These posts potentially reached a large audience, as the @GardaTraffic account has over 600,000 followers and the @GardaInfo account has nearly 300,000 followers.

Context and Background

The scam messages directed users to a link that could trick victims into handing over the keys to their cryptocurrency wallets, resulting in drained savings. Cluley noted that scammers often hijack established accounts with large followings because they are trusted and provide a rapid route to reach significant numbers of potential victims.

Beyond the fraudulent posts, the breach raises concerns about data privacy. If an unauthorized person could publish posts, they may also have been able to access direct messages containing sensitive personal information from members of the public who had contacted the police via Twitter.

Who Is Affected

A police spokesperson told the Belfast Telegraph that the force is carrying out an internal investigation into the incident. The spokesperson stated that Garda Síochána is working with the X platform to understand how the unauthorized access occurred and attempted to dampen fears that sensitive information had been compromised.

This incident is not the first time a police force has suffered a Twitter breach. In 2022, the Philadelphia Police Department’s account was compromised to post business-targeted adverts. In 2019, the UK Metropolitan Police account was hijacked to post explicit messages, leading to charges against two men. Five years prior, Dubai police accounts were hacked by an Anonymous-affiliated group.

What should you do?

Security professionals should monitor for similar compromises of high-trust government or institutional accounts on social media platforms. Organizations should review their social media security protocols, including multi-factor authentication and access logs, to prevent unauthorized posting. Users should remain skeptical of unexpected financial offers or airdrops from official accounts.

What to do and how to stay safe: Garda Síochána

• Verify unexpected financial offers or cryptocurrency airdrops through official channels before clicking any links or sharing wallet keys.
• Enable multi-factor authentication on all social media accounts to add an extra layer of security against unauthorized access.
• Review direct message history on compromised accounts for any sensitive personal information that may have been exposed to attackers.
• Monitor official statements from the affected organization for updates on the scope of the breach and confirmed remediation steps.

Step-by-step guide: Social Engineering Warning Signs and How to Respond

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which specific Irish police accounts were hacked in this incident?

The official @GardaInfo and @GardaTraffic Twitter accounts of Garda Síochána were accessed by an unauthorized third party.

What did the fraudulent posts on the hacked accounts say?

The messages claimed that followers were eligible to claim free cryptocurrency through an airdrop, directing them to a malicious link.

Has the Irish police confirmed if sensitive data was stolen?

A police spokesperson stated they are investigating and working with X, but attempted to dampen fears that sensitive information was compromised.