Cyber Incident Victim: Miranda Lambert
Date:
Aug 2015
Location:
United States of America
Summary
A hacker identifying as "Brenda" unlawfully accessed the country singer's private email account, compromising over 35,000 personal emails. The perpetrator admitted to cracking the password, extracting information sold to a supermarket tabloid that published claims under an anonymous insider attribution. Legal experts indicated the breach constituted serious federal and state criminal violations, potentially resulting in significant prison time if prosecuted, alongside civil liability exposing the hacker to multimillion-dollar lawsuits for damages.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In July 2015, an individual identifying herself as "Brenda" hacked into Miranda Lambert’s private email account by cracking her password, gaining unauthorized access to over 35,000 personal emails. The breach occurred amid public scrutiny of Lambert’s divorce from Blake Shelton, with Brenda initially claiming to have obtained information from someone close to the couple before confessing to direct involvement in the intrusion. After accessing the account, Brenda systematically reviewed the emails and sold confidential information to a supermarket tabloid, which published a report in late July 2015 attributed to an unnamed insider. In Touch Weekly confronted Brenda, who admitted to the hacking and confirmed her role in selling the data before the publication severed contact with her. The compromised emails contained personal communications, though specific content details were not disclosed in the report.
The incident exposed Lambert to significant privacy violations and reputational risks due to the unauthorized disclosure of sensitive correspondence. Legal expert Bradley Shear, a Maryland-based attorney specializing in internet law, emphasized the severity of the breach, noting potential federal and state criminal charges against the hacker, including the possibility of substantial prison time if convicted. Shear also indicated Lambert could pursue civil litigation seeking millions in damages for privacy violations and emotional distress. The tabloid’s publication of the stolen information amplified the incident’s visibility, though no law enforcement actions or civil lawsuits were confirmed in the available reporting. Brenda’s motives remained unclear, and the extent of ongoing access to Lambert’s account after the disclosure was not detailed.