Cyber Threat Actor: Jay Bosamiya

The threat actor is known by the alias Jay Bosamiya. Public records indicate the actor is based in the United States of America. No additional aliases or personal details have been disclosed in open sources.

On November 23, 2017, unauthorized access to Imgur resulted in the compromise of approximately 1.7 million user accounts. The breach exposed email addresses and passwords that were stored using an older hashing algorithm susceptible to brute‑force attacks. The intrusion was identified after an external security researcher notified the company, prompting an immediate internal investigation.

Affected users were notified and required to reset their passwords, while the platform migrated to a stronger encryption standard to protect credentials. The company stated that no personally identifiable information beyond email addresses and passwords was exposed, as the service did not collect additional personal data. Following the breach, an internal review of systems and processes was initiated to prevent recurrence.

Public attribution of the activity to Jay Bosamiya remains limited to the single reported incident, with no confirmed links to state sponsors, criminal consortia, or other threat groups. Consequently, any assertion about broader affiliations or strategic objectives would be speculative and is omitted per the requirement to use only evidenced information.

The available evidence shows a single event involving the compromise of user login credentials on a U.S.–based online service. No additional campaigns, malware families, tooling, or geographic targeting have been documented in open sources for this actor. This profile therefore reflects only the confirmed details derived from the reported breach and the actor's stated alias and location.