Cyber Incident Victim: Abby Lee Miller Dance Company
Date:
Dec 2015
Location:
United States of America
Summary
Cast members of a reality show, including Abby Lee Miller, were repeatedly targeted by hackers known as "The Mean Girls," who breached their cellphones, iCloud, email, and PayPal accounts. The attackers leaked personal information such as phone numbers on social media, resulting in one member receiving over 2,000 messages overnight; a private investigator identified four underage suspects but noted their elusiveness despite a three-month investigation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On December 28, 2015, multiple cast members of the reality television series "Dance Moms" experienced a cybersecurity breach targeting their personal digital accounts. Attackers compromised the cellphones, iCloud storage, email accounts, and PayPal financial accounts of Abby Lee Miller, Mackenzie Ziegler, and other unnamed cast members. The hackers publicly disseminated private information belonging to the victims, including phone numbers and unspecified cast-related data, through social media platforms. This incident represented a continuation of similar unauthorized access events, as the perpetrators had repeatedly infiltrated these accounts prior to the December breach. The attack was detected when cast members observed their private information circulating online and experienced abnormal account activity. Mackenzie Ziegler awoke on December 29 to find she had received over 2,000 messages, illustrating the immediate harassment impact of the data exposure.
The victims had previously engaged investigative resources to address the ongoing intrusions, having hired a private investigator approximately three months earlier in September 2015. The investigator determined that four underage female individuals, collectively referred to as "The Mean Girls," were responsible for the attacks, though their specific identities remained unconfirmed. Despite these findings, the perpetrators maintained operational anonymity and continued their activities undeterred. The investigation explicitly ruled out Lindsay Lohan as a potential suspect. No containment measures or account recovery processes were detailed in available reports. The primary documented consequences included persistent harassment through message flooding and repeated exposure of sensitive personal information across social media platforms, creating ongoing privacy and security concerns for the affected individuals.