Cyber Threat Actor: Braden River Football Team Coaches

The threat actor is identified as the coaches for the football team at Braden River High School, also referred to as the Braden River Football Team Coaches, and operates from the United States, specifically Florida. This group is not a conventional cyber‑criminal organization but rather individuals affiliated with a school athletic program who misused legitimate credentials to gain unauthorized access to a video‑hosting service. Their activity came to light in May 2018 when a tip prompted the Sarasota County School District to investigate, leading Hudl to revoke all access and notify affected parties while the district conducted its own review and asserted that appropriate disciplinary measures were taken, though specifics were withheld due to privacy policies.

The actor’s targeting was confined to rival high school football programs within the same geographic region, notably the teams of Venice, Booker, North Port and Sarasota. By logging into Hudl with a college recruiting account, they accessed opponents’ game and practice videos, an action that violated Hudl’s terms of service and provided the Braden River coaching staff with competitive insight into forthcoming opponents. No evidence indicates that the intrusion was motivated by financial gain, espionage, or disruption; the observable purpose was to obtain strategic video material for athletic preparation, as directly reflected in the accessed content and the subsequent platform response.

The observed tactics involved credential misuse rather than malware or custom tooling; the initial access vector was the unauthorized use of a shared or compromised college recruiting login to enter the Hudl platform, after which the actors viewed and likely downloaded video files. No malware families, exploit kits, or specialized tooling were referenced in the reporting. Attribution remains limited to the individuals employed by the school district, with no publicly asserted connection to state actors, criminal syndicates, or broader threat‑intelligence groups. The May 2018 incident, which resulted in Hudl’s access revocation, notifications to affected schools, and an internal district investigation, serves as the sole publicly documented campaign illustrating the actor’s behavior.