The Hacking

November 16 - 29 

The coordinated attack began on November 16th, 2024, and by the time it ended thirteen days later, over twenty of my personal, professional, and financial accounts had been compromised, deleted or breached. But this was no random act of cybercrime, it was strategic, methodical, and entirely personal. This was retribution.

The timing, the knowledge of my online habits, the deliberate sabotage, and the targeted nature of what was accessed and destroyed, all point to one conclusion: this was a campaign orchestrated by L.O., with assistance from her long-time accomplice and self confessed hacker, Dom. It was revenge, pure and simple.

Amazon, Microsoft and PayPal

It started with Amazon on the 16th. Then Microsoft and PayPal on the 17th. By the 18th, my primary Gmail was breached. Between the 19th and 25th, the attackers gained access to four of my Proton-Mail accounts, two of which were connected to my crypto exchanges, along with two more Gmail accounts, Facebook, Instagram, ArtStation, and several professional accounts such as LinkedIn, ElevenLabs, and OTOY.

My crypto exchange accounts were hit hardest: Bybit, Blofin, OKX, KuCoin, MEXC, Kraken, AltcoinTrader, VALR, Bitget, and CoinStats were all accessed or tampered with. The hackers had no trouble getting into all my accounts. Almost as if they knew every single account and password. 

Most telling of all was the use of the kringlekriss62@gmail.com account. I had set it up specifically for a test LinkedIn profile under the name Kurt Wagner, part of my effort to explore employment possibilities in Germany. This account had not been used to connect to anyone, yet it was breached and logged onto. From that profile, the attacker waited nearly 20 hours before sending a taunting message to my primary LinkedIn account:

"i hope u’r well. for now… have a nice time!"

The grammar, the lowercase letters, the tone, all pointed unmistakably to L.O. They didn’t stop at LinkedIn. The kringle account was also used to register an account on XHamster, using L.O.’s real name, an apparent attempt to frame me. Meanwhile, several of my ProtonMail addresses, which were linked to high-value crypto exchange accounts, were used to initiate transfers, attempts to bypass two-factor authentication, and efforts to lock me out entirely. Had I not used 2FA on most services, the financial losses would have been catastrophic.

Above: The subscription to a pornographic website which was supposed to frame me by using her real name. She later attempted to breach the email account and then tried to delete the account entirely. I managed to recover the account as evidence.