CSIDB logo
Threat actor

TheFamilyMethod

Attribution profile

Type
Sensationalist
Location
United States of America
Known incidents
1 incident
First seen
2008-01-01
Last seen
2008-01-01
Updated
2026-08-01 06:19
Aliases
2 aliases

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

The threat actor is known by the aliases TheFamilyMethod and hackinyolife, the latter often accompanied by the nickname “Fear”. Public sources indicate the actor operates from the United States of America. The alias hackinyolife has been used in conjunction with the group name @TheFamilyMethod when making public claims. No additional affiliations or state connections are described in the available material.

In January 2008 the actor claimed responsibility for a breach of the Bank of North Dakota. The claim was made through a paste site post that included transaction logs allegedly taken from the bank. The logs contained 124 individual transaction records. Each record displayed fields such as account number, account name, amount, authorization code, AVS, brand, card ending, CVD, first name, last name, merchant transaction ID, option code, date, transaction ID, confirmation number, error code, auth type, type, and city, along with address and phone number. Although the logs held first and last name fields, the actor stated that consumer names were not present in the released data. The Bank of North Dakota did not respond to inquiries from a cybersecurity outlet seeking confirmation of the breach’s authenticity.

The disclosed information consisted of payment‑card related data such as card type, the last four digits of card numbers, authorization codes, and merchant details. The actor’s claim was accompanied by a statement that the data originated from the 2008 timeframe. No further public reports link the actor to additional incidents or campaigns. The available sources do not describe any malware, tools, or specific intrusion techniques used by the actor. Consequently, the actor’s profile is defined primarily by this single disclosed incident.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB