Cyber Threat Actor: SoloKing

SoloKing is an alias associated with a threat actor who participated in a website defacement incident in July 2018. The attackers identified themselves as "Team Faceless Men" and referenced Game of Thrones in their message. They replaced the content of a Kaiser Permanente‑related health innovations website with a custom message and music. Kaiser Permanente responded by relocating the affected subdomain and later implementing a redirect to restore service. The organization publicly stated that no protected health information or internal systems were compromised during the incident. The defaced site was an externally hosted subdomain that operated outside Kaiser Permanente’s core network.

Initial reports indicated that the website had not received routine security updates prior to the breach, which contributed to its vulnerability. The perpetrators were described as a group of individuals with gaming backgrounds who lacked notable hacking history before this event. The incident highlighted concerns about third‑party security practices and their potential to affect an organization’s reputation despite the absence of data loss. No confirmed exposure of sensitive data was reported following the defacement. The case remains a referenced example of how relatively low‑skill actors can impact high‑profile entities through simple web‑based attacks.