Cyber Threat Actor: Logan

Thethreat actor known by the alias Logan has been identified as operating from the Netherlands. According to open source reporting, Logan is over eighteen years of age and travels internationally while employed at a cybersecurity firm. Investigators have stated that Logan is not affiliated with any hacking group or criminal consortium and appears to act alone. The actor’s pseudonym appeared in a dark web advertisement offering voter registration data. No further personal details such as real name or specific employer have been disclosed in public sources.

Logan’s observed activity centers on the acquisition and distribution of United States voter registration records, which constitutes a government‑sector target. The data sold included names, addresses, voter identifiers, status information and party affiliations from nine states. LookingGlass Cyber Solutions assessed that the actor’s primary motive is likely not financial, although Logan also exchanged portions of the data for stolen credit card details and login credentials. The actor obtained the records through a combination of social engineering techniques and Freedom of Information Act requests. No malware families, custom tools or exploit kits were referenced in the reporting of this activity.

The most widely reported operation involving Logan occurred on July 25, 2017, when over forty million voter records from Arkansas, Colorado, Connecticut, Delaware, Florida, Michigan, Ohio, Oklahoma and Washington State were listed for sale on the RaidForums marketplace for under five dollars. In the same incident, Logan claimed to possess additional voter data from twenty to twenty‑five other states and offered portions of the database in trade for credit card numbers and login credentials. The sale coincided with broader U.S. government efforts to aggregate voter registration information, prompting privacy advocates to warn about potential misuse. No subsequent campaigns or larger operational patterns have been publicly attributed to Logan beyond this episode. This summarizes the publicly known facts about the actor’s behavior and capabilities.