Cyber Incident Victim: Crayola
Date:
Jan 2015
Location:
United States of America
Summary
Crayola's official Facebook page was compromised by unauthorized actors who altered its content to display explicit and inappropriate material. The hijacking resulted in the temporary presence of not-safe-for-work (NSFW) posts on the social media platform, disrupting normal operations and exposing followers to unsanctioned content.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 14, 2015, Crayola's official Facebook page was compromised by unauthorized actors who altered its content to display sexually explicit material. The attackers replaced the brand’s family-friendly imagery with Not Safe For Work (NSFW) illustrations, deviating sharply from Crayola’s established aesthetic and messaging. The hijacked page remained under attacker control for an unspecified duration, during which the offensive content was visible to the company’s followers and the broader public. No technical details regarding the compromise method—such as credential theft, phishing, or platform vulnerabilities—were disclosed in available reports. The incident directly impacted Crayola’s digital presence, temporarily repurposing a major social media channel for inappropriate content dissemination.
Public visibility of the defaced page created reputational risks for the brand, given its association with children’s products and educational tools. Crayola restored the page to its original state after regaining administrative access, though the timeline for containment and recovery was not specified. The company did not publicly confirm whether user data or other systems were affected beyond the Facebook page itself. No threat actors claimed responsibility, and law enforcement involvement remained unverified in reporting. The event highlighted vulnerabilities in social media account management but yielded no documented operational, financial, or legal consequences beyond the temporary page alteration.