{ "id": "65c7c8b1-47fe-48aa-9391-cb61d473ab97", "created_at": "2026-04-06T00:06:59.849318Z", "updated_at": "2026-04-10T03:33:17.936285Z", "deleted_at": null, "sha1_hash": "128a5a48ead4e2a2a0c9ccaae3eba6a085d7fa4d", "title": "BuzzFeed hacked by OurMine after it claimed to unmask one of its members", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 37627, "plain_text": "BuzzFeed hacked by OurMine after it claimed to unmask one of its\r\nmembers\r\nBy Nicky Woolf\r\nPublished: 2016-10-05 · Archived: 2026-04-05 21:55:16 UTC\r\nBuzzFeed was hacked by OurMine on Wednesday in apparent retaliation for a story that claimed to unmask one of\r\nthe members of the secretive group.\r\nOn Tuesday, BuzzFeed posted a story claiming to have identified one of the members of the group as a Saudi teen\r\ncalled Ahmad Makki. In response, on Wednesday the hackers managed to breach BuzzFeed with a post, which has\r\nsince been taken down, that read:\r\n“Hacked by OurMine team, don’t share fake news about us again, we have your database. Next time it will be\r\npublic. Don’t fuck with OurMine again.”\r\nAsked in an email to clarify what “we have your database” meant, an email account associated with the group told\r\nthe Guardian: “Emails, Passwords Hashes, Usernames.”\r\nPrevious high-profile hacks by the group include attacks on HSBC, Google CEO Sundar Pichai, Facebook\r\nfounder Mark Zuckerberg, and Wikipedia founder Jimmy Wales. The group also took down the servers for\r\nNiantic’s popular augmented-reality game Pokémon Go in July.\r\nMakki did not respond to a request for comment. A statement on OurMine’s website reads: “Yesterday Buzzfeed\r\nCreated a post that we are only 1 member called Ahmed Makki, and we can confirm that we don’t Have a member\r\ncalled ‘Ahmed Makki’ and we are now 4 we were 3 but someone joined, and we hacked it because they are\r\nreporting fake news about us.”“We have a member known as ‘Makki’ But not ahmad makki, and he is not from\r\nsaudi arabia,” the statement continued.\r\nIn a series of conversations in July between the Guardian and a number of accounts verified as being associated\r\nwith OurMine, a picture emerged of a group of three (now four) ambitious former “black hat” – or malicious –\r\nhackers, all male, from several different countries, aged between 17 and 22.\r\nThe group’s aim, two members told the Guardian, was to make a name for themselves as “white hat” information\r\nsecurity consultants.\r\nOurMine makes no money from its more eye-catching hacks, one said. However, he claimed it made $20,000 to\r\n$40,000 every month from their security consultancy.\r\nOne of their hackers, who calls himself Abody, told the Guardian that he worked for Microsoft as a day job,\r\nthough this could not be verified. He said that he was most proud of the Pichai hack, which he said had been\r\nachieved using a vulnerability in the crowdsourced question-and-answer social network Quora.\r\nhttps://www.theguardian.com/technology/2016/oct/05/buzzfeed-hack-ourmine-ahmad-makki-facebook-google\r\nPage 1 of 2\n\nAsked what he enjoys about hacking, he said that he “just wants to upgrade people security”, and he said he\r\nwanted OurMine to be “the biggest security group in the world”.\r\nAbody said that he learned hacking “when I was 10, my friend was a hacker. He showed me his methods at\r\nhacking, and we learned a lot of hacking together, now we are working for OurMine.”\r\nThe group’s approach seems to be working. OurMine has swiftly made a name for itself with high-profile hacks\r\nsuch as that of Pichai –but some of its smaller hacks do seem to have resulted in people taking them on as security\r\nconsultants.\r\nOne of its clients, a YouTube video-maker called Jordi van den Bussche, told the Guardian his social media\r\naccounts were hacked by the group in 2015. After he responded to its message, he said: “Once we started talking I\r\nrealised that they kinda do it for fun and to help people, instead of trying to steal money or information. I then\r\nchallenged them to try and hack me again and they did! Multiple times!”\r\n“They helped me improve my security and because of them I managed to protect all my information from other\r\nhackers. Since their tips and tricks I realised that hackers aren’t always bad. These guys might have a bad name\r\nbut to me they are just trying to help,” Van den Bussche said.\r\nSource: https://www.theguardian.com/technology/2016/oct/05/buzzfeed-hack-ourmine-ahmad-makki-facebook-google\r\nhttps://www.theguardian.com/technology/2016/oct/05/buzzfeed-hack-ourmine-ahmad-makki-facebook-google\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://www.theguardian.com/technology/2016/oct/05/buzzfeed-hack-ourmine-ahmad-makki-facebook-google" ], "report_names": [ "buzzfeed-hack-ourmine-ahmad-makki-facebook-google" ], "threat_actors": [ { "id": "e4ccfe5c-4d77-4503-bf1c-36076dbd78d0", "created_at": "2022-10-25T16:07:24.522697Z", "updated_at": "2026-04-10T02:00:05.02215Z", "deleted_at": null, "main_name": "OurMine", "aliases": [ "ATK 128", "TAG-HA10" ], "source_name": "ETDA:OurMine", "tools": [], "source_id": "ETDA", "reports": null }, { "id": "74f1da67-5bc9-49ee-ba8e-b7e8b452a2c2", "created_at": "2023-01-06T13:46:39.021238Z", "updated_at": "2026-04-10T02:00:03.183989Z", "deleted_at": null, "main_name": "OurMine", "aliases": [], "source_name": "MISPGALAXY:OurMine", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434019, "ts_updated_at": 1775791997, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/128a5a48ead4e2a2a0c9ccaae3eba6a085d7fa4d.pdf", "text": "https://archive.orkl.eu/128a5a48ead4e2a2a0c9ccaae3eba6a085d7fa4d.txt", "img": "https://archive.orkl.eu/128a5a48ead4e2a2a0c9ccaae3eba6a085d7fa4d.jpg" } }