Claims
Qualified triples from the transcripts. Origin, speaker, and evidence stay attached.
These are not independently verified facts.
Criminal Screen
DEVELOPED_BY
Salvatore Verini Jr.
Sal created Criminal Screen as one of his three data-broker websites.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“He created three almost identical websites; Records Check, Criminal Screen, and the flagship site, National Public Data.”
Jack Rhysider ·
offsets 28917–29037
Records Check
DEVELOPED_BY
Salvatore Verini Jr.
Sal created Records Check as one of three nearly identical data-broker websites.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“He created three almost identical websites; Records Check, Criminal Screen, and the flagship site, National Public Data.”
Jack Rhysider ·
offsets 28917–29037
Luan Barbosa
DISCOVERED_BY
CrowdStrike
CrowdStrike investigated USDoD and determined Luan's name, address, phone number, tax registration ID, and other details from his reused email address.
Explicit
Direction flagged
Confidence 99%
· Jack Rhysider
EP 177
Details
“CrowdStrike was able to figure out his name, address, phone number, tax registration ID, and more.”
Jack Rhysider ·
offsets 40130–40228
PEO exploit
EXPLOITS
Unknown PEO vulnerability
The exploit was built for an unknown vulnerability in the Program Executive Office Enterprise Information System.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“were able to build an exploit for an unknown vulnerability in the US army IT platform called the Program Executive Office Enterprise Information System”
Jack Rhysider ·
offsets 15281–15432
National Public Data breach
INVOLVES
data scraping
The episode describes the breach as involving a scraping company whose purpose was to find and aggregate information about people.
Attributed
Confidence 96%
· Speaker3
EP 177
Details
“The problem with the NPD data breach is that it is a scraping company that was designed to find out everything it can about you.”
Speaker3 ·
offsets 34164–34293
Matthew Kierans
MEMBER_OF
University of Iowa
Matthew obtained a $100,000-a-year IT job at the University of Iowa while using William Woods's identity.
Explicit
Confidence 98%
· Jack Rhysider
EP 177
Details
“Now he got a $100,000-a-year IT job at the University of Iowa”
Jack Rhysider ·
offsets 3028–3089
Luan Barbosa
SAME_AS
USDoD
Jack identifies the hacker known as USDoD as Luan Barbosa.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“his name was Luan Barbosa”
Jack Rhysider ·
offsets 19640–19665
“USDoD, or Luan”
Jack Rhysider ·
offsets 20381–20395
USDoD
TARGETS
Department of Defense
USDoD breached the Department of Defense and published military emails and passwords.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“That is how he got the hacker name USDoD, by breaching the Department of Defense”
Jack Rhysider ·
offsets 16430–16510
USDoD
TARGETS
NATO
USDoD or Luan is described as having broken into a cybersecurity defense center at NATO.
Explicit
Confidence 98%
· Jack Rhysider
EP 177
Details
“Luan, broke into Cybersecurity Defense Center at NATO”
Jack Rhysider ·
offsets 20391–20444
USDoD
TARGETS
Airbus
USDoD or Luan is described as having breached Airbus and its vendors.
Explicit
Confidence 98%
· Jack Rhysider
EP 177
Details
“the aerospace company Airbus and their 3,000 vendors”
Jack Rhysider ·
offsets 20491–20543
USDoD
TARGETS
InfraGard
USDoD targeted InfraGard, the FBI-linked system for reporting incidents.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“His next target was InfraGard.”
Jack Rhysider ·
offsets 16826–16856
“that was the site that USDoD was trying to attack”
Jack Rhysider ·
offsets 17249–17298
Luan Barbosa
USES
Doxxing
Luan was doxxed after CrowdStrike and others identified and exposed his personal details, although Jack characterizes the doxxing as initially private.
Explicit
Confidence 96%
· Jack Rhysider
EP 177
Details
“Basically, Luan got doxxed, but privately”
Jack Rhysider ·
offsets 40229–40270
Matthew Kierans
USES
identity theft
Matthew stole William Woods's wallet and documents, copied his identity information, and used William's identity for decades.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“Matthew had started calling himself William Woods.”
Jack Rhysider ·
offsets 1606–1656
“Matthew had been using William’s identity for thirty-one years”
Jack Rhysider ·
offsets 5730–5792
USDoD
USES
data scraping
USDoD used a Python script to retrieve InfraGard members' contact information through the site's API.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“USDoD asked a friend to write him a Python script to grab the data”
Jack Rhysider ·
offsets 18947–19013
“he used it to steal every InfraGard member’s contact information”
Jack Rhysider ·
offsets 19020–19084
National Public Data
USES
data scraping
National Public Data collected personal information by scraping or acquiring data from brokers, marketing lists, social media, and apps.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“Sal either bought or scraped data from other data brokers, subscription and marketing lists, loyalty and rewards programs, social media, and other apps.”
Jack Rhysider ·
offsets 29848–30000
USDoD
USES
credential reuse
USDoD exploited Sal's reused passwords to move from Records Check into National Public Data.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“Sal reused passwords, which allowed Luan to log in to National Public Data”
Jack Rhysider ·
offsets 32902–32976
USDoD
USES
social engineering
USDoD tried to gain access to the PEO network by impersonating and socially engineering one of its developers.
Explicit
Confidence 99%
· Jack Rhysider
EP 177
Details
“He tried getting access through the developer using social engineering techniques”
Jack Rhysider ·
offsets 15656–15737
Clearview AI
USES
data scraping
Clearview AI is described as scraping photographs and information from major social media websites.
Explicit
Confidence 98%
· Jack Rhysider
EP 177
Details
“They were raiding major social media websites. They’d take Facebook, for example, grab every picture and bit of information they could”
Jack Rhysider ·
offsets 26583–26717
USDoD
USES
PEO exploit
USDoD accepted a job to help collect military data and worked with Russian hackers in an operation involving an exploit for PEO.
Explicit
Confidence 90%
· Jack Rhysider
EP 177
Details
“USDoD accepted the job”
Jack Rhysider ·
offsets 15190–15212
“USDoD discovered that a way into this network”
Jack Rhysider ·
offsets 15468–15513
Garmin ransomware attack
ATTRIBUTED_TO
Evil Corp
The Garmin ransomware attack is attributed in the episode to Evil Corp.
Explicit
Confidence 99%
· Jack Rhysider
EP 178
Details
“this time by a hacker group called Evil Corp”
Jack Rhysider ·
offsets 8346–8390
Laura Woods
AUTHORED
Darknet Diaries
Laura Woods is credited with researching and writing the episode.
Explicit
Confidence 96%
· Jack Rhysider
EP 178
Details
“This episode was researched and written by Clippy’s revenge, Laura Woods.”
Jack Rhysider ·
offsets 35424–35497
Jack Rhysider
AUTHORED
Darknet Diaries
Jack Rhysider says he created this episode of Darknet Diaries.
Explicit
Confidence 98%
· Jack Rhysider
EP 178
Details
“This episode was created by me, Mr. Glitchy Pants, Jack Rhysider.”
Jack Rhysider ·
offsets 35358–35423
Ubiquiti breach
COMPROMISES
Ubiquiti
The breach involved unauthorized access to Ubiquiti systems and theft of company data.
Explicit
Confidence 99%
· Jack Rhysider
EP 178
Details
“Somebody has been poking around where they shouldn’t have, and data has been exfiltrated”
Jack Rhysider ·
offsets 21860–21948
CWT ransomware attack
COMPROMISES
Carlson Wagonlit Travel Company
The CWT ransomware attack compromised Carlson Wagonlit Travel Company’s network and rendered many computers unusable.
Explicit
Confidence 99%
· Jack Rhysider
EP 178
Details
“Then they infected the network with ransomware.”
Jack Rhysider ·
offsets 7515–7562
“Ransomware rendered a lot of their computers worthless”
Jack Rhysider ·
offsets 7760–7814
Garmin ransomware attack
INVOLVES
Ransomware
The Garmin attack involved ransomware.
Explicit
Confidence 99%
· Jack Rhysider
EP 178
Details
“Garmin, the GPS company, gets hit with ransomware, too”
Jack Rhysider ·
offsets 8290–8344