Whitewarlock
Attribution profile
- Type
- Criminal
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2024-04-14
- Last seen
- 2024-04-14
- Updated
- 2026-10-12 22:26
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Whitewarlock, also known as Whitewarlock, is a threat actor associated with Russia. In April 2024, the actor was linked to an external system breach at Neiman Marcus Group that exposed personal information, including names combined with other identifiers, of over 64,000 individuals, including Maine residents. The retailer discovered the breach after it occurred and notified affected consumers via written correspondence, though no identity theft protection services were offered. No further details on targeting sectors, strategic objectives, specific TTPs, malware families, or affiliations are publicly available in the provided sources.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.