Cyber Incident Victim: Gigi Hadid
Date:
Nov 2015
Location:
United States of America
Summary
Hackers breached a model's iCloud account, accessing private photos and videos, then attempted extortion by threatening to release the material unless paid a ransom, additionally warning they would sell the content to media outlets. The victim refused payment, reported the incident to law enforcement, and enlisted a private security firm to identify and pursue legal action against the perpetrators.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In November 2015, Gigi Hadid became the target of a blackmail scheme orchestrated by hackers who compromised her iPhone and iCloud account. The attackers accessed private photos and videos stored on her device and cloud account, then contacted Hadid directly with threats to release the material unless she paid an unspecified ransom. The hackers further escalated their demands by threatening to sell the compromised content to media outlets if their financial demands were not met. This incident occurred shortly after Hadid's designation as a Victoria's Secret Angel, though no specific timeline was provided for the initial breach or subsequent extortion attempts. The attackers leveraged unauthorized access to personal data as the primary coercion mechanism, focusing on the potential reputational and privacy damage from public disclosure of the private content.
Hadid refused to comply with the ransom demands and immediately engaged law enforcement agencies to investigate the breach and extortion attempt. She concurrently hired a private security firm to assist in identifying the perpetrators, with the explicit goal of pursuing criminal prosecution. The incident highlighted risks associated with cloud storage vulnerabilities, though no technical specifics regarding the breach method were disclosed publicly. No evidence suggested the hackers followed through on their threats to release or sell the material during the reported timeframe. The response prioritized legal action over negotiation, reflecting a stance against capitulating to cyber extortion. Law enforcement involvement indicated the incident was treated as both a computer intrusion case and a criminal extortion matter.