Lizard Squad's LizardStresser hacked and customer details made public
DDoS service operated by Lizard Squad gets hacked, user data leaked Andrew Griffin / The Independent : Lizard Squad's cyberattack tool hacked, customer details leaked Anna Brading / Naked Security : Lizard Squad's DDoS service hacked, buyers' details revealed Adam Clark Estes / Gizmodo : Lizard Squad Kept Its Hacker-for-Hire Customers' Info in Plain Text Brian Krebs / Krebs on Security : Another Lizard Arrested, Lizard Lair Hacked Chris Stobing / VPN Creative : Lizard Squad DDoS Service Database Hacked Paul Tamburro / CraveOnline : Lizard Squad Made a Tool that Allowed Users to Attack Websites, But Now Those Users Have Been Named & Shamed Rob Williams / HotHardware.com News : Cold Blooded! Lizard Squad's ‘LizardStresser’ DDoS Service Reportedly Hacked Olivia Solon / Mirror.co.uk : 25% OFF — Lizard Squad's cyberattack-for-hire service hacked … Rahul Punyani / The Tech Portal : LizardSquad's DDoS tool falls prey to hack, exposes complete customer database Nathaniel Mott / PandoDaily : Hacking the hackers: Lizard Squad's DDoS-enabling tool has been compromised Kyt Dotson / SiliconANGLE : Lizard Squad DDoS-for-hire website compromised, stored passwords in plain text John Leyden / The Register : Nice SECURITY, ‘Lizard Squad’. Your DDoS-for-hire service LEAKS Brad Reed / BGR : Universally hated hacker group suffers a humiliating hack of its own
Context & Ripple Effects
Lizard Squad turned its $6-to-$500 DDoS-for-hire service into a business weeks after its attacks on Xbox Live and PlayStation Network, and Krebs later reported the booter runs on thousands of hacked home routers rather than owned infrastructure. The group had already lost operational security once, when U.K. police allegedly arrested a member in early January.
Now the booter itself has been breached: the customer database is exposed, and Gizmodo's report that credentials were stored in plain text means buyers of the attack tool are identifiable by anyone who downloads the leak.
First-order effects
- LizardStresser customers — people who paid to attack websites — are directly exposed: their payment and account details are public in plain text, giving law enforcement and researchers a ready-made suspect list.
- The service's credibility collapses at the moment it was monetizing notoriety; a booter that cannot protect its own database undercuts the product pitch entirely.
Second-order effects
- Competing booter services face the same proof-of-insecurity dynamic — buyers must weigh that any operator can leak or log them, pushing demand toward services (or actors) promising anonymity they cannot verify.
- The hacked-router botnet underneath LizardStresser remains the reusable asset; whoever absorbs those compromised home routers inherits attack capacity independent of Lizard Squad's brand.
Third-order effects
- If every high-profile booter eventually gets breached and doxxed, DDoS-for-hire becomes an attrition business where customer exposure, not takedowns, is the main deterrent — and plaintext credential handling becomes the recurring failure mode.
- For investigators, leaked customer databases set a template: the fastest route into cybercrime ecosystems may be the criminals' own commerce infrastructure, not external forensics.
The trend: Criminal-as-a-service platforms are discovering that selling attacks commercially creates the very paper trail — payments, accounts, logs — that unravels them.