Nice Hash Security Breach Details – December 17, 2017
Here is the latest information about the breach directly from the Nicehash web site.
The security breach: what happened?
As has been widely reported, NiceHash’s security system was breached in a sophisticated attack in the early morning of 6 December. Our payment system was compromised and the entire contents of the NiceHash bitcoin wallet were stolen – around 4,700 BTC. Our investigation to determine the nature of the attack and its impact is ongoing, with the support of police investigators and a cyber forensic team, and while we want to be as open and transparent as we can, for obvious reasons we can’t provide all the details of the breach. We are very sorry for any inconvenience that the hack may have caused and have committed every resource in response to the issue since we became aware we had been victims of the security breach.
Our investigation to determine the nature of the attack and its impact is ongoing, with the support of police investigators and a cyber forensic team, and while we want to be as open and transparent as we can, for obvious reasons we can’t provide all the details of the breach.
We are very sorry for any inconvenience that the hack may have caused and have committed every resource in response to the issue since we became aware we had been victims of the security breach.
How are you going to prevent such events in the future?
We have taken a number of specific measures to make the system safer. We have redesigned our payment system and thoroughly revised and upgraded security procedures from the ground up. The redesigned payment system is now handled with extra security measures – dual channel approach with manual creation and manual confirmation of every transaction that leaves our system. Withdrawals are manually confirmed once per day at 12:00 AM CET.
Why is my current balance 0?
Following the security breach, all funds held in the NiceHash bitcoin wallet were stolen. On our new dashboard we have sought to show both the old balance, and the current balance.
How will you restore my old balance?
Now that the site is back online, you are free to lease, mine and make money once more. Our community is very important to us and given the loyalty of our users, we want to make sure that everyone is fully reimbursed after what happened. This has been under discussion since the day of the hack. We have now been able to reserve the funds required to restore balances from a group of international investors in our business. The exact date of reimbursement for old balances will be announced by January 31, 2018. We need this interim period to ensure all legal paperwork is processed correctly, so please be patient while we do this. Please also note that balances lower than 0.0001 BTC will be written off; apologies for any inconvenience. We have considered a number of ways to help our community to cover the stolen funds and we feel that this is the most appropriate way to ensure that everyone is back in business as soon as possible.
What happened to balances that were deposited after the breach?
All funds that were deposited after the breach should be safe. Those funds will be automatically sent back to your address.
Where can I get additional help or ask more questions?
Please submit a support ticket or send us an email to [email protected]. Please do keep in mind that we are facing and increased volume of requests at this time, for obvious reasons, and it will take us longer than usual to respond. We are committed to answering all of your questions, so please be patient.