{"id":17452,"date":"2020-01-09T08:48:36","date_gmt":"2020-01-09T13:48:36","guid":{"rendered":"https:\/\/www.elteni.com\/?p=17452"},"modified":"2020-01-09T08:48:36","modified_gmt":"2020-01-09T13:48:36","slug":"cftc-issues-alerts-and-expects-responses","status":"publish","type":"post","link":"https:\/\/www.elteni.com\/insights\/?p=17452","title":{"rendered":"CFTC issues alerts and expects responses!"},"content":{"rendered":"<p>In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and Managed Services Providers (MSPs). The attack known today as the \u201cCloud Hopper Mega Hack\u201d was first noticed in 2016, as indicated by the <a href=\"https:\/\/elteni.us18.list-manage.com\/track\/click?u=b7f681478c27a5cb772d5bede&amp;id=2fbb2e3c8a&amp;e=7ccdfdca48\">Wall Street Journal<\/a>.<br \/>\n<a href=\"https:\/\/www.elteni.com\/insights\/?p=17452&#038;preview=true\">Preview (opens in a new tab)<\/a><br \/>\nThe hackers were able to compromise systems used by the MSPs to not only gain deeper access to their networks, but to also gain access to different client networks. It is suspected that these hackers stole a wide range of sensitive data. It is also believed that as many as 12 different service providers have been compromised; some of the names include Fujitsu, Tata Consultancy Services, NTT Data, Dimension Data, Computer Sciences Corp. and DXC Technology.<\/p>\n<p>In response to the recently published article by the Wall Street Journal, cyber threat alerts were issued to member firms by regulators from the commodities and futures market. The National Futures Association (NFA) sent a blast email to all NFA members firms (on behalf of the CFTC), with the alerts attached, requiring member firms to provide information regarding relationships they potentially have with any of the affected providers.<\/p>\n<p>The following guidelines were provided to member firms:<\/p>\n<ul>\n<li>SDs and FCMs should respond by <strong>January 10, 2020<\/strong>, <em>whether <\/em>any of their cloud service providers were affected by the attack. DSIO has requested that SDs and FCMs respond even if their cloud service providers were not affected by the attack.<\/li>\n<\/ul>\n<ul>\n<li>CPOs, CTAs, IBs and RFEDs should respond by <strong>January 10, 2020<\/strong>, <em>if<\/em> any of their cloud service providers were affected by the attack. Registrants in these categories whose cloud service providers were not affected by the attack <em>do not <\/em>need to respond to DSIO pursuant to the cyber threat alerts.<\/li>\n<\/ul>\n<ul>\n<li>Any CFTC registrant whose cloud service provider or providers were affected by the attack should include information regarding whether and when the provider(s) informed it about the attack, a summary of any steps it has taken to protect its systems and data in response to the attack and its plans to notify market participants whose data may have been affected.<\/li>\n<\/ul>\n<ul>\n<li>In addition, each CFTC registrant should respond by <strong>January 20, 2020<\/strong>, advising <em>whether <\/em>it has received any communications from, or is communicating with, cloud service providers, customers, clients, counterparties, business partners or industry-related parties regarding the attack described in the <em>WSJ <\/em>article or a <em>related potential cyber event<\/em>. This request is much broader than those described above, as it covers \u201crelated potential cyber events\u201d and not merely the attack described in the <em>WSJ <\/em>article, and it is not limited to events related to cloud service providers. Also, given the phrasing of these sections of the cyber threat alerts, it appears DSIO is requesting responses from all registrants, regardless of whether they have any affirmative information to report.<\/li>\n<\/ul>\n<ul>\n<li>DSIO has requested that registrants notify the staff promptly with updated information as their evaluation of the situation evolves.<\/li>\n<\/ul>\n<p>Any information submitted to DSIO pursuant to the cyber threat alerts should be sent via email to<a href=\"mailto:%20DSIOAlerts@CFTC.gov\"> DSIOAlerts@CFTC.gov<\/a>.<\/p>\n<h2>Recommendation<\/h2>\n<p>Pretty simple, do as the regulators requested and supply them with the information they have asked for. The worst thing you can do is not respond to their request.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":17453,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[84,3,47,89,90],"tags":[85,86,87,88],"class_list":["post-17452","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cftc","category-cyber","category-ocie","category-regulatory","category-sec","tag-cftc","tag-cloud-hopper","tag-cyber-alert","tag-nfa"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CFTC issues alerts and expects responses! - Insights<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.elteni.com\/insights\/?p=17452\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CFTC issues alerts and expects responses! - Insights\" \/>\n<meta property=\"og:description\" content=\"In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.elteni.com\/insights\/?p=17452\" \/>\n<meta property=\"og:site_name\" content=\"Insights\" \/>\n<meta property=\"article:published_time\" content=\"2020-01-09T13:48:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1706\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Elteni\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Elteni\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452\"},\"author\":{\"name\":\"Elteni\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/e415dfcf12d1dc9ad6eca68055c5e075\"},\"headline\":\"CFTC issues alerts and expects responses!\",\"datePublished\":\"2020-01-09T13:48:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452\"},\"wordCount\":548,\"image\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/1629-scaled-1.jpg\",\"keywords\":[\"CFTC\",\"cloud hopper\",\"cyber alert\",\"NFA\"],\"articleSection\":[\"CFTC\",\"Cyber\",\"OCIE\",\"Regulatory\",\"SEC\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452\",\"name\":\"CFTC issues alerts and expects responses! - Insights\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/1629-scaled-1.jpg\",\"datePublished\":\"2020-01-09T13:48:36+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/e415dfcf12d1dc9ad6eca68055c5e075\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#primaryimage\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/1629-scaled-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/wp-content\\\/uploads\\\/2020\\\/01\\\/1629-scaled-1.jpg\",\"width\":2560,\"height\":1706,\"caption\":\"CFTC - Hedge Funds, Private Equity, RIA, Asset Management\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?p=17452#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.elteni.com\\\/insights\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CFTC issues alerts and expects responses!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#website\",\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/\",\"name\":\"Insights\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/#\\\/schema\\\/person\\\/e415dfcf12d1dc9ad6eca68055c5e075\",\"name\":\"Elteni\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=mm&r=g\",\"caption\":\"Elteni\"},\"url\":\"https:\\\/\\\/www.elteni.com\\\/insights\\\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CFTC issues alerts and expects responses! - Insights","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.elteni.com\/insights\/?p=17452","og_locale":"en_US","og_type":"article","og_title":"CFTC issues alerts and expects responses! - Insights","og_description":"In December 2019, the U.S. government issued indictments against two hackers who were allegedly involved in a multiyear effort to penetrate the systems of several IT Vendors and [&hellip;]","og_url":"https:\/\/www.elteni.com\/insights\/?p=17452","og_site_name":"Insights","article_published_time":"2020-01-09T13:48:36+00:00","og_image":[{"width":2560,"height":1706,"url":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg","type":"image\/jpeg"}],"author":"Elteni","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Elteni","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.elteni.com\/insights\/?p=17452#article","isPartOf":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452"},"author":{"name":"Elteni","@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/e415dfcf12d1dc9ad6eca68055c5e075"},"headline":"CFTC issues alerts and expects responses!","datePublished":"2020-01-09T13:48:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452"},"wordCount":548,"image":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452#primaryimage"},"thumbnailUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg","keywords":["CFTC","cloud hopper","cyber alert","NFA"],"articleSection":["CFTC","Cyber","OCIE","Regulatory","SEC"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.elteni.com\/insights\/?p=17452","url":"https:\/\/www.elteni.com\/insights\/?p=17452","name":"CFTC issues alerts and expects responses! - Insights","isPartOf":{"@id":"https:\/\/www.elteni.com\/insights\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452#primaryimage"},"image":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452#primaryimage"},"thumbnailUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg","datePublished":"2020-01-09T13:48:36+00:00","author":{"@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/e415dfcf12d1dc9ad6eca68055c5e075"},"breadcrumb":{"@id":"https:\/\/www.elteni.com\/insights\/?p=17452#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.elteni.com\/insights\/?p=17452"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.elteni.com\/insights\/?p=17452#primaryimage","url":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg","contentUrl":"https:\/\/www.elteni.com\/insights\/wp-content\/uploads\/2020\/01\/1629-scaled-1.jpg","width":2560,"height":1706,"caption":"CFTC - Hedge Funds, Private Equity, RIA, Asset Management"},{"@type":"BreadcrumbList","@id":"https:\/\/www.elteni.com\/insights\/?p=17452#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.elteni.com\/insights"},{"@type":"ListItem","position":2,"name":"CFTC issues alerts and expects responses!"}]},{"@type":"WebSite","@id":"https:\/\/www.elteni.com\/insights\/#website","url":"https:\/\/www.elteni.com\/insights\/","name":"Insights","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.elteni.com\/insights\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.elteni.com\/insights\/#\/schema\/person\/e415dfcf12d1dc9ad6eca68055c5e075","name":"Elteni","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=mm&r=g","caption":"Elteni"},"url":"https:\/\/www.elteni.com\/insights\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts\/17452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=17452"}],"version-history":[{"count":0,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/posts\/17452\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=\/wp\/v2\/media\/17453"}],"wp:attachment":[{"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.elteni.com\/insights\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}