Cyber Incident Victim: Fidelity Bank
Date:
Sep 2015
Location:
Cayman Islands
Summary
A financial institution experienced a cyberattack by a group identifying as "Hack for Trump," which compromised its website and threatened public release of stolen data unless a $30,000 ransom was paid. The organization temporarily took its online services offline and notified customers of the breach, while the attackers claimed to possess detailed compromised information in communications to media outlets.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In September 2015, Fidelity Group experienced a cybersecurity breach when hackers identifying themselves as "Hack for Trump" infiltrated the organization's website. The attackers claimed to have stolen sensitive data and issued a blackmail threat, demanding a $30,000 payment to prevent public release of the compromised information. Fidelity responded by temporarily taking its website offline as a containment measure, disrupting normal customer access to online services. The incident gained public attention when the hacking group directly contacted the Cayman Compass news outlet via email, disclosing their intrusion and detailing the nature of the data they had acquired. While the specific types of compromised records weren't enumerated in available reports, the hackers emphasized they possessed sufficiently valuable information to justify their extortion attempt.
The operational impact included service disruption through the voluntary website takedown, which Fidelity communicated directly to affected customers. The organization did not initially disclose whether it negotiated with the threat actors or involved law enforcement authorities. Media coverage emerged on September 22, four days after the initial compromise date referenced in the article title, indicating the incident unfolded over several days before public disclosure. The hackers' choice to contact media rather than exclusively dealing with Fidelity privately demonstrated an escalation tactic to increase pressure on the organization. No subsequent reports confirm whether data was ultimately leaked or if financial transactions occurred between the parties. Service restoration timelines and forensic investigation details remained undisclosed in available documentation of the event.