The Hacking

November 16 - 29 

L.O.s coordinated cyber attack began on November 16th, 2024, and by the time it ended thirteen days later, over twenty of my personal, professional, and financial accounts had been attacked, deleted or breached. But this was no random act of cybercrime, it was strategic, methodical, and entirely personal. This was retribution. Part of her planned revenge, she was going to destroy me digitally, and with the help of Dom, her hacker boyfriend and accomplice, they set about causing me as much harm as possible. 

The timing, the knowledge of my online habits, the deliberate sabotage, and the targeted nature of what was accessed and destroyed, all point to one conclusion: this was a campaign orchestrated by L.O., with assistance from her long-time accomplice and self confessed hacker, Dom. It was revenge, pure and simple. A narcissist never forgets when you have done something they consider to be a betrayal. After she had me banned on PIKA and I fought back and had her banned, she considered me an enemy, a betrayer, and as such she is justified, at least in her mind, to do anything she can to destroy me. That would include lying, stealing, fabricating evidence, laying false charges and robbing me of my money. To a narcissist rules are only there to be abused for their benefit, they do not feel laws apply to them. She had long ago planted the spyware on my PC and now she was ready to strike. 

Amazon, Microsoft and PayPal

It started with Amazon on November 16th. Then came attacks on Microsoft and PayPal on the 17th. By the 18th, my primary Gmail was attacked. Luckily I managed to quickly recover the primary gmail account. Between the 19th and 25th, the attackers gained access to multiple commercial, personal and professional accounts like Facebook, Instagram, ArtStation, and several other professional accounts such as LinkedIn, ElevenLabs, and OTOY.They breached several Proton-Mail accounts, two of which were connected to my crypto exchanges, along with a secondary Gmail account.

The true goal is revealed

November 28, 2024 - December 1st 2024

On November 28, 2024,  my Blofin account had verification codes requested nine separate times. Several login password reset verification requests were sent to my XT.com account. I sent several emails to my compromised ProtonMail account, but received no response.

By November 29, the attack expanded significantly.  They requested security codes for my Bybit account twice, accessed my MexC and BingX accounts, confirmed password changes on Bybit, and attempted to change my OKX password.

At 02:04 on November 29, the suspects used my hijacked email to create an account on XHamster.com, deliberately setting the profile creator as "heterosexual" and from "South Africa."

At 02:09, A confirmation email was sent showing the username was set as L.O.'s real name and using my compromised address at   kringlekriss62@gmail.com  as the registration address. She was trying to frame me by making it look as if I had signed her up on the porn site.But she did not count on me getting back control of my email several weeks later. When I did, I discovered google activity logs that prove she did the registration as she was in control of the account at the time. No random hacker would use her full name to register at a porn site. This absolutely proves it was her.She would attempt the same tactic again later with her new employer, when she sent a fabricated email pretending to be me writing it. Her employer subsequently tried to sue me for this but was of course unsuccessful. 

At 02:23, the hackers accessed and changed the passwords on my secondary LinkedIn account under the name "Kurt Wagner," which I had created specifically for seeking employment in Germany. L.O. was the only other person who knew about this account's existence. She waited there for almost 20 hours, and while she waited she used google search, looking for the word 'Übersetzer'. When I used the Google search myself after having recovered the account, the first result was DeepL. L.O.'s favorite translation app that she used in her SEO work.

At 22:12, as soon as I logged into my main LinkedIn account, two messages were sent to me from the now hijacked Kurt Wagner profile: "I hope u'r well. For now..." and "Have a nice time!" These were the first communications I had received from L.O. in almost 100 days. When I responded, I was deliberately ignored. She had spent almost 20 hours waiting just to send me that message, and would send nothing more to me. 

At 23:48, after having delivered her message and then refusing further communication, L.O. searched on google for any associated accounts on my  "CharlesHoskinson@proton.me" email and deliberately targeted my ElevenLabs voice AI platform account. This account contained hundreds of professionally engineered AI voices representing more than a year of my work, which had been used in video productions. She knew all about the account having watched me use while screen-sharing with me as I worked.  L.O. first canceled my subscription and then deleted my entire account. No ransom was demanded. She took this action solely to damage me professionally.


You may be asking how I know all this. Here is the answer. After recovering the email account I inspected my Google Gmail activity record and it was all there. Every step that they had made while in control of the email account was documented and recorded. Below are just some of the recorded activities they performed. You can see the searches and login they carried out.

After the destruction of ElevenLabs

Between 19:41 and 19:51 on November 29, my Altcointrader account underwent a rapid sequence of manipulations:

• Login (19:41)
• Password changed (19:42)
• Login (19:43)
• Password reset (19:49)
• Password changed again (19:50)
• Login approval (19:50)
• Successful login (19:51)

The attackers also attempted to modify verification options on my BingX account three times, logged into my XT.COM account, reset my phone, and received a verification code with an attachment on my Proton account.

On November 30 at 00:21, I received an "account disabled" notification from Altcointrader. My LinkedIn account showed a 'new device registration' for the "Remember me" feature three times, followed by an account deletion confirmation ("We're sorry to see you go"). I continued trying to communicate with the attackers through emails, but was just ignored as before. I found later that my emails had not even been opened. 

On December 1st  the email address received confirmations about two email changes from Blofin Support, a password change confirmation from Deepcoin, a OTOY Octane render subscription cancellation, and three more security notices from XT.COM.

On February 14, 2025, at 13:55, Google security notified me that someone had attempted to regain access to my kringlekriss62@gmail.com account. This attempt was blocked and logged. L.O. then tried to delete the associated XHamster account, but a recovery email was generated and sent to me, as I had by then regained control of my accounts. I preserved this evidence using the recovery link. I say it was L.O. as there is no logical reason why anyone else would bother to try and delete the account. It was in her own name. She practically signed her name to the entire cyber attack.

This attack was clearly deliberate and targeted, focusing on damaging both my personal reputation and professional work as well as trying to achieve financial gain. The attack demonstrated awareness of rarely-used accounts and professional tools, indicating detailed prior intelligence gathering. The unresponsiveness to my communication attempts suggests a personal motive focused on damage rather than negotiation.

Most telling of all was the taunting message she sent to my primary LinkedIn account:

"i hope u’r well. for now… have a nice time!"

The grammar, the lowercase letters, the tone, all pointed unmistakably to L.O.  Meanwhile, several of my ProtonMail addresses, which were linked to high-value crypto exchange accounts, were used to attempt transfers, trying to bypass two-factor authentication, reset passwords and change recovery methods. Had I not used 2FA on all these these exchanges, the financial losses would have been catastrophic. 

This incident only serves to demonstrate how cruel and evil narcissists can be. L.O. had no reason to destroy my life. Yet she tried again and again. And at the same time she was accusing me of destroying her life! She left enough evidence behind to definitively prove it was her that did these things. I have never hacked anything of hers. Below is an email where she attempts to blackmail me into silence and admits to having my email login details.

Keylogger and Malware Insertion

It was only later that I recalled a particular incident. Twice in June 2024, L.O. had sent me .mp4 video files via Discord under the pretense of needing help with sound effects. However, when I opened them in Adobe After Effects, my PC crashed instantly and then rebooted again. My regular Antivirus did not detect anything but that is normal for Rootkits. Discord does not scan files for Viruses and she was well aware of that. Later analysis confirmed the presence of keyloggers and monitoring spyware, probably supplied to her by Dom, which gave them access to all my accounts. Luckily I managed to find the exact incident when this occurred in my collection of screenshots of Discord conversations.

After uploading and opening a file from her my machine crashes and reboots. The file was infected with malware. I discovered her betrayal much later, only after the hacking. 

Unemployed 

By far the most malicious act by L.O. was the deliberate deletion of my ElevenLabs account. There was no financial benefit in doing that. No random hacker would even bother. But L.O. knew I had spent months training hundreds of custom AI voices for an animated series I was working on, a project she at first tried to become a part of and then often threatened to sabotage. When that account was deleted so were the voices. She knew exactly what that meant. I could not continue working on the project.She had finally accomplished her goal of making sure I lost my job.