APT / THREAT GROUP

USDoD

aliases

Last seen:Mar 17, 2026

Intelligence Profile

USDoD is a threat actor known for leaking large databases of personal information, including from companies like Airbus and the U.S. Environmental Protection Agency. They have a history of engaging in high-profile data breaches, such as exposing data from the FBI's InfraGard program. USDoD has also been involved in web scraping to obtain information from websites like LinkedIn.

Threat Analysis

USDoD is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.hackread.com/us-environmental-protection-agency-hacked-data-leaked/

→https://www.cysecurity.news/2023/09/transunion-refutes-data-breach-reports.html

→https://socradar.io/unmasking-usdod-the-enigma-of-the-cyber-realm/

→https://krebsonsecurity.com/2023/09/fbi-hacker-dropped-stolen-airbus-data-on-9-11/

Quick Facts

TypeAPT / Threat Group

Aliases1

SourceMalpedia

Also Known As

USDoD

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search USDoD