U.S. v. Artem Radchenko (SEC EDGAR Insider Trading Hack)
Key Facts
- Legal Status: FUGITIVE in U.S. District Court for the District of New Jersey.
- Primary Target Sector: Regulatory Agencies, Securities Markets, Public Corporations.
- Documented Financial Loss: $4.1 million.
- 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Incident Overview
Ukrainian cybercriminals who hacked into the SEC EDGAR corporate filing test system, exfiltrating non-public quarterly earnings reports for hundreds of publicly traded companies before their official release to generate $4.1 million in illegal insider trades.
Root Cause & Infiltration Vector
Adversary gained initial access via Exploit Public-Facing Application: Radchenko exploited a software vulnerability in the SEC EDGAR test server software to extract unpublished draft 8-K and 10-Q reports.
Operational Impact & Financial Blast Radius
Resulted in $4,100,000 in documented financial liabilities. Generated $4.1 million in illegal trading profits using stolen corporate filings.
Executive Risk Checklist
- 1. Are 100% of external and administrative access portals protected by phishing-resistant MFA?
- 2. Is network microsegmentation enforced between user workstations and core database enclaves?
- 3. Have immutable offline backups and incident escalation procedures been validated within 90 days?
Incident Execution & Kill-Chain Lifecycle
Sequential reconstruction of intrusion stages from initial infiltration to resolution.
Radchenko exploited a software vulnerability in the SEC EDGAR test server software to extract unpublished draft 8-K and 10-Q reports.
Adversaries navigated internal subnets, elevating system permissions and harvesting credentials to expand administrative access across Regulatory Agencies, Securities Markets, Public Corporations infrastructure.
Ukrainian cybercriminals who hacked into the SEC EDGAR corporate filing test system, exfiltrating non-public quarterly earnings reports for hundreds of publicly traded companies before their official release to generate $4.1 million in illegal insider trades.
Standard of Care Remediation & Hardening
Empirical engineering takeaways and preventative controls derived from this incident.
Procedural & Incident Timeline
Grand jury in Newark, New Jersey, indicts Radchenko and Oleksandr Ieremenko for computer fraud and wire fraud.
Named Defendants & Operatives
| Defendant | Nationality | Status | Prison Term | Restitution | Notes |
|---|---|---|---|---|---|
| Artem Radchenko | Ukraine | fugitive | Pending | None | Perpetrator of SEC EDGAR test filing system hack for securities insider trading. |
Substantiated MITRE ATT&CK Techniques
| Technique ID | Technique Name & Tactic | Primary Source Evidence Excerpt | Locator | Verification |
|---|---|---|---|---|
| T1190 | Exploit Public-Facing Application Initial Access | "Radchenko exploited a software vulnerability in the SEC EDGAR test server software to extract unpublished draft 8-K and 10-Q reports." | Indictment ¶ 14, Page 8 | reviewed |