Cyber Threat Actor: Lorde Bashtien

Lorde Bashtien is thealias used by an individual who has been linked to the defunct hacking collective known as CWA and who is believed to reside in the United States, with indications pointing to a Miami‑area connection. The actor first came to public attention in January 2016 after releasing the personal details of approximately eighty law‑enforcement officers from the Miami Police Department, the Miami‑Dade Police Department, and the Miami Beach Police Department, claiming that the data had been extracted from FBI servers rather than from local department systems. The individual asserted that the leak was motivated by a personal grudge against the Miami Police Department after officers had targeted some of the actor’s friends during a raid that ended in gunfire, a motive that was explicitly stated in interviews with the hacker. Because of the alleged association with CWA, the actor is considered to share the group’s history of targeting high‑profile U.S. government figures, including the CIA Director, the FBI Deputy Director, the National Intelligence Director, and a senior advisor to President Barack Obama, as well as compromising the Joint Automated Booking System and claiming access to a secret FBI portal.

The targeting pattern evidenced by the actor’s activities focuses on U.S. law‑enforcement agencies and broader federal government personnel, indicating a geographic concentration within the United States and a sectoral emphasis on public safety and governmental institutions. The actor’s stated objective is retaliation for perceived personal harm, which distinguishes the activity from financially driven crime, traditional espionage aimed at state secrets, or disruption for ideological or protest purposes; no claims of monetary gain, intelligence collection, or service interruption have been made in the available reporting. While the actor hinted at future leaks on social media, the specific strategic goals beyond retaliation remain unspecified in the source material.

No detailed technical tactics, techniques, or procedures are described in the referenced articles, so particular malware families, initial‑access vectors, or tooling styles cannot be attributed to Lorde Bashtien based on the provided information. The most concrete operation publicly tied to the alias is the January 2016 doxing of eighty Miami‑area police officers, an act that the actor linked to the broader legacy of CWA, which had previously disclosed the personal data of roughly twenty‑four hundred U.S. officials and claimed intrusions into sensitive federal systems. These connected episodes illustrate a pattern of exposing sensitive government and law‑enforcement data, though the articles do not furnish further specifics on the actor’s independent capabilities or subsequent campaigns.