Dox everywhere: LulzSec under attack from hackers, law enforcement
Hacking group Lulz Security has found itself coming under attack from all angles, drawing unwanted attention from both law enforcement and other hackers groups. Though the group's antics have won it many fans …
Context & Ripple Effects
LulzSec spent early June 2011 escalating in public: a pastebin confrontation with FBI affiliates and whitehat trackers on June 3 (LulzSec versus FBI affiliates and whitehats), the dump of 26,000 porn-site credentials ten days later (26,000 usernames and passwords released), and then an open hack-request line inviting the crowd to pick targets. Each stunt raised the group's profile — and its attack surface.
What changed with this report is that the group's signature move, doxing others, is now being run against its own members by rival hacker crews while law enforcement closes in. Ars Technica frames it as pressure from all sides, though the same coverage notes the antics have also won LulzSec a substantial fan base — a split audience that complicates any crackdown.
First-order effects
- LulzSec members face exposure of real identities for the first time, removing the anonymity that has been the group's core operational protection since its June hacking spree began.
- Law enforcement gains what it previously lacked: named suspects, supplied largely not by its own investigation but by competing hacker crews settling scores.
Second-order effects
- Rival groups and whitehat trackers now have a template for disabling a hacktivist crew without touching its servers — dox the humans behind the handle — raising the personal cost of joining any similar collective.
- The fan base documented in coverage becomes a double-edged asset: sympathetic attention sustains recruitment and notoriety even as it guarantees continued law-enforcement priority on the case.
Third-order effects
- If doxing proves decisive, hacktivism shifts from a low-risk, anonymous-participation model toward identity warfare, where each campaign ends when its participants are unmasked rather than when its servers fall.
- Crowd-sourced attribution — rivals and volunteers feeding investigators — points toward a policing model in which the most effective counter-hacktivist force is other hackers, with agencies acting on what the crowd surfaces.
The trend: Hacktivist groups like LulzSec are entering an arms race where doxing members has replaced server takedowns as the decisive counter-weapon, collapsing the anonymity that made the movement viable.