Cyber Incident Victim: Kendall Jenner
Date:
Apr 2015
Location:
United States of America
Summary
Kendall Jenner's Twitter account was compromised by unauthorized individuals who posted offensive tweets referencing her father's rumored gender transition and Justin Bieber, utilizing vulgar hashtags including #KKK. The hackers tagged two other accounts subsequently suspended by Twitter, though no malicious links or scams were distributed despite the account's 10.2 million followers. The breach reportedly stemmed from inadequate security measures, potentially involving weak password practices, credential reuse, or phishing, with no two-factor authentication enabled. This incident aligns with a pattern of security compromises affecting members of the Kardashian-Jenner family, including previous Twitter hijackings and iCloud breaches involving private content.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On April 8, 2015, unauthorized actors compromised the Twitter account of reality television personality Kendall Jenner, a cast member of "Keeping Up with the Kardashians." The attackers posted multiple offensive tweets to her 10.2 million followers, including explicit sexual references involving Justin Bieber and false claims regarding her father’s alleged gender transition. Specific tweets contained hashtags such as #SloppyToppy and #KKK, alongside mentions of two other Twitter accounts presumably linked to the hackers. These messages represented a significant deviation from Jenner’s typical content, indicating account compromise rather than legitimate posts. The incident marked another security breach affecting the Kardashian-Jenner family, following previous compromises involving Kris Jenner’s iCloud account and hijackings of Kim and Khloe Kardashian’s social media.
Twitter’s security team responded by suspending the two accounts referenced in the unauthorized tweets, effectively containing further coordinated messaging from the attackers. Jenner’s account regained normal operation after the breach, though the exact method of compromise remained unconfirmed—potential vectors included weak passwords, phishing, or credential reuse across multiple platforms. The incident exposed millions of followers to inappropriate content but avoided more severe consequences like malware distribution or financial scams. No evidence suggested persistent access or data exfiltration beyond the tweet spree. The breach highlighted recurring account security vulnerabilities among high-profile users, with the Kardashian-Jenner family experiencing multiple prior incidents involving unauthorized access to private media and social accounts.