TheCthulhu

Profile narrative

CthulhuSec, also known as TheCthulhu, is a threat actor linked to multiple data breach incidents and is reported to be based in the United Kingdom. The actor operates under these aliases in underground hacking circles and has been associated with the public release of stolen datasets. Attribution of the incidents described in the threat actor context to CthulhuSec is indicated by the overview material provided.

The actor’s known activity includes targeting an online dating service and a law‑enforcement affiliated organization. The Muslim Match breach exposed user account details and private messages from a platform that describes itself as a free marriage service. The Fraternal Order of Police incident involved the theft and dissemination of internal contracts, member information and forum backups from a U.S. police organization. These events show that the actor has focused on sectors such as social/dating services and public safety entities, affecting victims located in both the United Kingdom and the United States.

Regarding tactics, the Muslim Match compromise resulted in the exfiltration of usernames, email and IP addresses, geographic locations, hashed passwords and chat logs, which were subsequently published on breach notification sites. The Fraternal Order of Police breach was described by the victim as involving a software vulnerability that accepted a fraudulent encryption key, a detail cited in the reporting of that incident. No specific malware families or tooling styles are referenced in the available sources, and the actor’s activity is characterized primarily by data theft and public leakage rather than the deployment of custom malware. The Muslim Match and Fraternal Order of Police breaches represent the most notable campaigns publicly associated with CthulhuSec.

Incidents

Attributed incidents are available to members.