Cyber Incident Victim: San Marcos Police Department
Date:
Mar 2015
Location:
United States of America
Summary
A hacker operating under the alias "Bitcoin Baron" disrupted the websites of the City of San Marcos and its police department, intending to demand the termination and imprisonment of former officer James Palermo for assaulting a college student. The hacker mistakenly believed Palermo remained employed despite the officer having already been removed from duty and incarcerated for the prior assault, which caused the victim significant injuries including lost teeth and a concussion. The cyberattack rendered both municipal sites inaccessible, constituting an act of vigilante retaliation based on outdated information regarding the officer's employment status and legal consequences.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In March 2015, an individual using the alias "Bitcoin Baron" conducted unauthorized intrusions against the City of San Marcos, Texas, and San Marcos Police Department websites, causing both to become inaccessible. The hacker publicly claimed responsibility through a video released on Monday night, demanding the termination and imprisonment of former police officer James Palermo for his alleged assault of college student Alexis Adelphi during an attempted arrest in 2013. Bitcoin Baron accused the police department of retaining Palermo despite knowing his history, stating, "Your police department is disgusting... in no way will I stop 'til Palermo is in prison." The attack was motivated by a belief that Palermo remained employed and unpunished, with the hacker seeking vigilante justice for injuries Adelphi sustained, including lost teeth and a concussion.
The assault incident referenced by the hacker had occurred two years prior, in 2013, when Palermo was still an active officer. Public records confirmed Palermo had already been indicted, removed from the police department, and incarcerated for the assault before the 2015 cyberattack. Bitcoin Baron's actions were based on outdated information, resulting in disruptive website takedowns against entities no longer associated with Palermo. At the time of the article's publication, both municipal websites remained offline as a direct consequence of the intrusion. No additional containment measures or organizational responses were documented beyond the prior legal resolution of Palermo's case. The incident demonstrated how delayed retaliatory actions against resolved personnel matters could cause unnecessary operational disruptions.