Syrian Electronic Army Attacks Forbes Website, Steals User Info
The Syrian Electronic Army has broken into the website of business magazine Forbes and claims to have made off with a million user account names and passwords, according to statements and screenshots posted on the group's Twitter feed.
Context & Ripple Effects
Forbes is the latest media outlet hit by the Syrian Electronic Army, whose campaign against Western press and tech companies stretches back at least to the Guardian's Twitter hijacking in April 2013 and the Financial Times breach that May. The pattern escalated from social-account takeovers into deeper intrusions: in January alone the group hit Skype's Twitter, Facebook and blog, then compromised Microsoft employee email accounts, before turning to Forbes' user database.
First-order effects
- Roughly a million Forbes account holders are exposed if the group's claim is accurate — with password reuse, those credentials put email, social, and financial accounts at risk far beyond the site itself.
- Forbes must move immediately on credential resets and forensic cleanup, while its editorial operation — previously untouched by this campaign — now sits alongside its website infrastructure in the blast radius.
Second-order effects
- Every publisher the SEA has already struck, including the Financial Times and Guardian, faces renewed pressure to audit whether their own user databases share the same weaknesses Forbes just exposed.
- Media companies that lean on standard username-password registration face a credibility problem with advertisers and subscribers, pushing them toward third-party login providers and hardened authentication they would otherwise defer.
Third-order effects
- If the pattern holds, credential databases at news organizations become standing strategic targets for state-aligned hacktivist groups rather than opportunistic ones, forcing the industry to treat user-data security as an editorial-independence issue.
- A sustained campaign against Western media brands by a single identifiable group strengthens the case for regulators and standards bodies to impose baseline breach-disclosure and storage requirements on publishers, not just banks and retailers.
The trend: State-aligned hacktivist groups are escalating from hijacking media companies' social accounts to stealing their user databases, turning every major publisher's credential store into a geopolitical target.