Our Daily Breach: weird & weirder

Last year I missed an important detail covering the story of Luan "USDoD" BG, the Brazilian hacker that was just out and proud about leaking the data of National Public Data and InfraGard. He lived the dream, he breached CrowdStrike leaking their threat actor list in the breachforums. That move ultimately got him too much attention and the authorities made moves on him. He was arrested in Brazil a year to this day, but here's where it gets weird:

It's not known why USDoD confessed to those breaches

According to this take from CPO Magazine:

"Considering that Techmundo published an unverified internal CrowdStrike report from an anonymous source, it is not entirely clear why USDoD essentially went out in public and offered himself up for arrest by confessing to his data breaches."

Luan confirmed the doxxxing by CrowdStrike... over an internal memo? It's a bit weird, but I suppose we have to take Luan's word here when he said "I wanted this to happen".

Oh but it gets weirder

USDoD was reported to have sold stolen data on breachnation.io which was seized, but as of August of 2025 has come back online with a new owner with a totally not suspicious company name "Domain Name Privacy Inc."

Domain Name Privacy Inc. is a registered business in Cyprus. The registrar willing to host this domain again is Galcomm, an Israeli host provider. I don't recommend you visit, but this is what it looks like now:

If you go to the site today it'll show "related searches" and append a totally not at all suspicious extension to the URL links (bottom left of screenshot). The Privacy Policy and Legal are copy pasta jobs from 2023. I think we all see what's going on here... so this message is for Luan, everyone else can leave now. Go on, shoo now.

Okay look Luan, whenever they let you out of prison: não clique no link! É um pote de mel. 🍯