UK Government Minister Lucy Powell’s X account was hacked to promote a fake cryptocurrency called $HCC, which claimed ties to the House of Commons. The fraudsters’ posts aimed to create legitimacy with official branding but were quickly removed. This incident follows a pattern of attacks on high-profile individuals, highlighting ongoing cybersecurity threats that involve phishing tactics and large-scale scams. Action Fraud and cybersecurity experts recommend steps to safeguard social media accounts, including two-factor authentication and robust passwords.
On Tuesday morning, UK Government Minister Lucy Powell’s X account was compromised during a cryptocurrency scam involving a fake digital currency purportedly backed by the “House of Commons.” This incident was reported by various news outlets on Wednesday. Cybercriminals exploited her verified account to promote a non-existent currency, identified as “$HCC,” described as a “people-powered digital currency” that leverages blockchain technology.
The hackers disseminated multiple posts under Powell’s account, falsely incorporating the official House of Commons logo to lend credence to their fraudulent scheme. Following the discovery of the breach, Powell’s office acted swiftly to secure her account and remove the misleading content. Powell, who represents Manchester Central, has a significant following of nearly 70,000 users on the platform.
This breach aligns with an alarming trend of hacks targeting high-profile individuals with considerable social media followings, following a similar incident involving BBC journalist Nick Robinson earlier this year, who was tricked into providing access to his account. Robinson’s compromised account was similarly used to promote a bogus cryptocurrency named “$Today.”
Luke Nolan, a senior research associate at CoinShares, classified the hack as a typical “pump and dump” scheme, where fraudsters create fake cryptocurrencies to inflate prices artificially and encourage investments before cashing out. Although this high-profile account hack occurred, it attracted minimal attention, resulting in just 34 transactions and approximately £225 in profit for the scammers.
According to Action Fraud, reports of social media and email account hacking have surged significantly in 2024, with over 35,000 incidents documented. Security analysts suggest that many of these attacks originate from phishing emails containing links to fraudulent websites designed to capture credentials. Cybercriminals can quickly establish counterfeit cryptocurrencies and act swiftly once they breach an account.
The UK Parliament has remarked on the importance of cybersecurity and provides guidance to members for improved online safety, yet specific cybersecurity practices remain undisclosed. Action Fraud further recommends that users enhance their account security through two-factor authentication and by creating strong passwords, preferably composed of three random words. Lucy Powell has held her position since the Labour government took office in the summer, where she manages the legislative agenda and advocates for backbench MPs’ rights.