Elliot Alderson

Profile narrative

The threat actor known by the aliases @fs0c131y and Elliot Alderson is identified as a French security expert who operates primarily on social media platforms. The actor uses the Twitter handle @fs0c131y and the nickname Elliot Alderson in public communications. Public reporting places the actor’s location in France, though no further personal details are disclosed. The actor gained notoriety after responding to a public challenge issued by the chairman of India’s Telecom Regulatory Authority. This incident highlighted the actor’s willingness to engage in high‑visibility privacy debates.

The actor’s targeting in the reported case focused on a senior Indian government official, specifically the TRAI chief, indicating a regional focus on India. The objective expressed by the actor was to demonstrate the risks associated with publishing an Aadhaar number publicly, rather than to pursue financial gain, espionage, or disruption. By leaking personal details such as address, date of birth, mobile number, PAN card number and a WhatsApp profile picture, the actor aimed to show how much information could be derived from a single identifier. The actor explicitly stated that the disclosure was intended to make the TRAI chief understand why sharing his Aadhaar number was unsafe. No mention of monetary motivation, state‑directed espionage, or destructive intent appears in the source material.

The actor’s tactics, techniques and procedures rely on open‑source intelligence gathering and the strategic use of social media for disclosure. No malware families, exploit kits or custom tooling are referenced in the article; the actor’s method consisted of collecting publicly available data and linking it to official government circulars. The actor posted screenshots of the leaked information with certain fields redacted, shared a link to a Ministry of Electronics and Information Technology circular, and published a partially obscured photograph of the TRAI chief with a family member. Attribution in public reporting limits the actor to a French security expert with no asserted ties to any state intelligence service or criminal consortium. The TRAI chief Aadhaar leak remains the most notable and publicly documented operation associated with this actor, serving as a representative example of their activity.

Incidents

Attributed incidents are available to members.