CSIDB logo
Threat actor

Lorde Bashtien

Attribution profile

Type
Sensationalist
Location
United States of America
Known incidents
1 incident
First seen
2016-01-23
Last seen
2016-01-23
Updated
2026-08-01 00:55
Aliases
1 alias

STIX characteristics

Threat actor characteristics are available to members.

Profile narrative

Lorde Bashtien is the alias used by an individual linked to the defunct CWA hacking group, with open‑source reporting indicating a possible residence in the Miami area of the United States. The actor’s known activities focus on exposing personal data of law‑enforcement personnel and U.S. government officials, suggesting a targeting pattern that includes federal agencies, police departments, and broader government sectors. Public statements from the United States appears to be the primary geographic scope of the observed operations. The stated motivation behind the 2016 leak of officer information was a personal grudge stemming from a police raid that involved acquaintances, indicating that the actor’s strategic objective is retaliation and disruption rather than financial gain or traditional espionage.

Technical details disclosed in the sources note that Lorde Bashtien claimed to have obtained the officer data from FBI servers, though the specific initial access vectors, malware families, or exploit tools employed are not described in the available material. The actor’s use of a Twitter account to announce and distribute the leaked information highlights a reliance on social‑media platforms for dissemination. Prior associations with CWA reference the group’s compromise of the Joint Automated Booking System (JABS) and claims of access to a secret FBI portal, indicating a capability to infiltrate government‑related applications and portals without specifying the exact techniques used.

Among the publicly reported operations, the most cited incident is the January 23 2016 release of personal details for approximately eighty officers from the Miami Police Department, Miami‑Dade Police Department, and Miami Beach Police Department, which the actor asserted was sourced from FBI infrastructure. Earlier activities attributed to CWA include the compromise of high‑profile officials such as CIA Director John Brennan, FBI Deputy Director Mark Giuliano, US National Intelligence Director James Clapper, and President Obama’s Senior Advisor John Holdren, as well as the November 2015 disclosure of personal data belonging to roughly 2,400 U.S. government officials. After the 2016 leak, Lorde Bashtien signaled intentions for additional releases by posting “more leaks soon, stay tuned” on a newly created Twitter account, underscoring a pattern of sequential data‑exposure campaigns.

Incidents

Attributed incidents are available to members.

1 incident
CSIDB