SXUL
Attribution profile
- Type
- Hacker
- Location
- United States of America
- Known incidents
- 3 incidents
- Sources
- 2 sources
- First seen
- 2017-05-12
- Last seen
- 2023-12-01
- Updated
- 2026-10-17 05:19
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
SXUL is a hacker operating under that alias and located in the United States. In December 2023 SXUL compromised the systems of National Public Data, a Florida‑based consumer data broker, exfiltrating billions of records containing names, Social Security numbers, addresses, phone numbers, and email addresses. The stolen dataset was subsequently transferred to the cybercriminal USDoD, who offered it for sale at $3.5 million before it was leaked publicly on underground forums. The source material does not specify any malware families, initial access vectors, tooling style, or affiliations for SXUL, nor does it describe targeting beyond this single consumer data broker incident.
Incidents
Attributed incidents are available to members.
3 incidentsSources
Sources available to members: 2 sources.