{ "id": "bd526298-fbc1-492c-9d41-030406244a29", "created_at": "2026-04-06T00:17:41.269203Z", "updated_at": "2026-04-10T03:28:46.847538Z", "deleted_at": null, "sha1_hash": "8e6dfb773f32dbb6fde948db5f3e55d90bc6b207", "title": "British prosecutors say teen Lapsus$ member was behind hacks on Uber, Rockstar", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 83616, "plain_text": "British prosecutors say teen Lapsus$ member was behind hacks on\r\nUber, Rockstar\r\nBy Alexander Martin\r\nPublished: 2023-07-11 · Archived: 2026-04-05 19:24:21 UTC\r\nA British Crown Court on Tuesday lifted a reporting restriction, allowing the naming of teenager Arion Kurtaj\r\nwho is accused of hacking Uber, Revolut, and video game developer Rockstar Games in a short period of time last\r\nSeptember.\r\nKurtaj, now 18, has been deemed not fit to stand trial by medical professionals. The jury will decide whether he is\r\nliable for the hacking incidents rather than guilty of them.\r\nThe teenager has been charged with 12 offenses, including three counts of blackmail, two counts of fraud, and six\r\ncharges under the Computer Misuse Act, as reported by Reuters.\r\nProsecutors allege that Kurtaj was a member of the Lapsus$ hacking gang but acted independently when he broke\r\ninto the systems of ride-hailing business Uber, fintech firm Revolut, and the developer of Grand Theft Auto in a\r\nspate of successive incidents in September 2022.\r\nKurtaj, alongside a 17-year-old who may not be named for legal reasons, has also been accused of attempting to\r\nblackmail the telecommunications company BT as well as the graphics-card maker Nvidia as part of their\r\nactivities with the Lapsus$ gang.\r\nThe 17-year-old is being tried for two counts of blackmail, two counts of fraud, and three charges under the\r\nComputer Misuse Act, all of which relate to the alleged Lapsus$ activities targeting BT and Nvidia.\r\nHe has denied these charges, although he had previously pleaded guilty to two offenses under the Computer\r\nMisuse Act and one count of fraud.\r\nAt the time of the Uber hack, a person claiming to be responsible contacted The New York Times and security\r\nresearchers to claim they had managed to access the ride-hailing company's computer network through social\r\nengineering.\r\nUber said the hacker had posted what was described as pornographic material to an internal information page for\r\nemployees, alongside the message: “Fuck you wankers.”\r\nThe Grand Theft Auto incident was disclosed on a fan forum for the video game series by an individual who\r\nclaimed to have also hacked Uber. This individual then shared a link to clips from Grand Theft Auto 6, a title\r\nwhich Rockstar had not publicly confirmed was in development.\r\nAt the time of the Revolut incident, some users on Reddit reported seeing messages with inappropriate language\r\non the app’s support chat. Revolut replied that it was aware of those messages and “taking steps to ensure this\r\nhttps://therecord.media/british-prosecutors-accuse-teen-lapsus-member-of-uber-revolut-rockstar-hacks\r\nPage 1 of 2\n\ndoes not happen again.”\r\nProsecutors said that the hacking incidents were linked to the teens by investigators who found their IP addresses\r\nthrough a number of email and Telegram accounts which the pair allegedly used to boast about their antics.\r\nNo previous article\r\nNo new articles\r\nAlexander Martin\r\nis the UK Editor for Recorded Future News. He was previously a technology reporter for Sky News and a fellow\r\nat the European Cyber Conflict Research Initiative, now Virtual Routes. He can be reached securely using Signal\r\non: AlexanderMartin.79\r\nSource: https://therecord.media/british-prosecutors-accuse-teen-lapsus-member-of-uber-revolut-rockstar-hacks\r\nhttps://therecord.media/british-prosecutors-accuse-teen-lapsus-member-of-uber-revolut-rockstar-hacks\r\nPage 2 of 2", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://therecord.media/british-prosecutors-accuse-teen-lapsus-member-of-uber-revolut-rockstar-hacks" ], "report_names": [ "british-prosecutors-accuse-teen-lapsus-member-of-uber-revolut-rockstar-hacks" ], "threat_actors": [ { "id": "be5097b2-a70f-490f-8c06-250773692fae", "created_at": "2022-10-27T08:27:13.22631Z", "updated_at": "2026-04-10T02:00:05.311385Z", "deleted_at": null, "main_name": "LAPSUS$", "aliases": [ "LAPSUS$", "DEV-0537", "Strawberry Tempest" ], "source_name": "MITRE:LAPSUS$", "tools": [ "Mimikatz" ], "source_id": "MITRE", "reports": null }, { "id": "d4b9608d-af69-43bc-a08a-38167ac6306a", "created_at": "2023-01-06T13:46:39.335061Z", "updated_at": "2026-04-10T02:00:03.291149Z", "deleted_at": null, "main_name": "LAPSUS", "aliases": [ "Lapsus", "LAPSUS$", "DEV-0537", "SLIPPY SPIDER", "Strawberry Tempest", "UNC3661" ], "source_name": "MISPGALAXY:LAPSUS", "tools": [], "source_id": "MISPGALAXY", "reports": null }, { "id": "2347282d-6b88-4fbe-b816-16b156c285ac", "created_at": "2024-06-19T02:03:08.099397Z", "updated_at": "2026-04-10T02:00:03.663831Z", "deleted_at": null, "main_name": "GOLD RAINFOREST", "aliases": [ "Lapsus$", "Slippy Spider ", "Strawberry Tempest " ], "source_name": "Secureworks:GOLD RAINFOREST", "tools": [ "Mimikatz" ], "source_id": "Secureworks", "reports": null }, { "id": "52d5d8b3-ab13-4fc4-8d5f-068f788e4f2b", "created_at": "2022-10-25T16:07:24.503878Z", "updated_at": "2026-04-10T02:00:05.014316Z", "deleted_at": null, "main_name": "Lapsus$", "aliases": [ "DEV-0537", "G1004", "Slippy Spider", "Strawberry Tempest" ], "source_name": "ETDA:Lapsus$", "tools": [], "source_id": "ETDA", "reports": null } ], "ts_created_at": 1775434661, "ts_updated_at": 1775791726, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/8e6dfb773f32dbb6fde948db5f3e55d90bc6b207.pdf", "text": "https://archive.orkl.eu/8e6dfb773f32dbb6fde948db5f3e55d90bc6b207.txt", "img": "https://archive.orkl.eu/8e6dfb773f32dbb6fde948db5f3e55d90bc6b207.jpg" } }