London Daily

Focus on the big picture.
Sunday, Sep 14, 2025

US teen ‘mastermind’ behind Twitter hack just finished high school

Graham Ivan Clark faces 30 felony charges for hacking 130 Twitter accounts of business titans and celebrities as part of a cryptocurrency scam.
The alleged mastermind behind the July 15 hack of Twitter accounts of business titans, celebrities and a former president didn’t need sophisticated hacking tools to pierce the company’s security system. Rather, he convinced an information technology employee at Twitter that he was a colleague who needed login credentials to access the company’s customer support platform, according to law enforcement officials.

It worked, in spectacular fashion.

Graham Ivan Clark, 17, allegedly hijacked 130 Twitter accounts as part of a cryptocurrency scam, according to a criminal affidavit filed in Tampa, Florida. The accounts that were hacked included those of former US president Barack Obama, Amazon Chief Executive Officer Jeff Bezos and Tesla CEO Elon Musk.

Clark, who authorities said had just graduated from high school, now faces 30 felony charges for hacking those accounts, posting messages on their behalf and luring additional victims into sending him bitcoin donations worth more than US$100,000, according to law enforcement.

Two others were charged by federal authorities for allegedly aiding in the scheme by serving as brokers on the sale of compromised Twitter accounts: Mason Sheppard, 19, of the UK, and Nima Fazeli, 22, of Orlando.

Lawyers or family members for the defendants couldn’t be located for comment. Clark’s mother, Emiliya Clark, told NBC News that her son was innocent. “I believe he didn’t do it. I’ve spoken to him every day,” she said. “I’m devastated.”

Twitter thanked law enforcement for swiftly making arrests. In its most recent update on the hack, on July 30, the company acknowledged that employees were duped into sharing sensitive information over the phone and that it has decided to temporarily limit access to its internal tools as it seeks to understand the scope of the breach, while improving its security protocols to “make them even more sophisticated.”

Of the 130 accounts that were targeted, 45 had tweets sent from them, according to Twitter. Direct message inboxes were accessed in 36 of the accounts, and Twitter data was downloaded from seven of them, the company said.

Having suffered other embarrassing breaches in recent years, Twitter, the preferred social media platform for President Donald Trump, among other political and business leaders, must now reckon with the possibility that a teenager beat teams of engineers and layers of cybersecurity protections.

Former Twitter security employees have said too many people have access to user accounts, including employees and outside contractors, and that the company management has often dragged its heels on upgrades to information security. Twitter disputed the former employees’ characterisation of the company’s oversight of accounts.

The defendants were allegedly part of an underground subculture of hackers – known as “OGUsers” – who are dedicated to stealing, buying and selling online accounts with desirable usernames. In the OGUser world, a short username on Instagram or Twitter sells for tens of thousands of dollars in cryptocurrency. Winning ownership of usernames, like “@6” or “@dark,” yield their own form of virtual bragging rights.

The hackers in this community are particularly skilled in social engineering, which relies on the art of impersonation and deception rather than traditional hacking, according to cybersecurity experts. Those tools have been successfully leveraged against individuals to steal their social media usernames or credit card details, but not typically in such a brazen fashion.

In one instance, according to the federal complaint, a user named Kirk#5270 said in an online forum, “I work for Twitter. I can claim any @ for you.” Another user, Rolex#0373, who authorities said is an alias used by Fazeli, responded, “Prove it.” During their exchange, Kirk#5270 provided Rolex#0373 with access to the Twitter handle @Foreign for US$500, according to authorities. Kirk#5270 isn’t identified in the complaint, though federal authorities said he played a central role in the Twitter hack.

“Chaewon,” an alleged alias of Sheppard’s, posted an OGUser thread entitled, “Pulling email for any Twitter/Taking Requests.” In it, Chaewon “advertised that he could change email addresses tied to any Twitter account for US$250 and provide direct access to accounts for between US$2,500 and US$3,000,” according to a federal government filing.

Clark has allegedly been active in hacking since before he was a teenager, according to Logan Derouanna, 19, who lives in Florida and said he is no longer part of the OGUser scene.

Derouanna said Clark stole his Instagram account in 2014. “I had my Instagram account hacked when I was 13, and he was literally only 11,” Derouanna said, adding that his account had more than 500,000 followers at the time. “All I did was click a link he sent me.”

Two other hackers independently confirmed Clark has been active since at least 2014.

State authorities have charged Clark as an adult under Florida law, rather than federal, because “Florida law allows us greater flexibility to charge a minor as an adult in a financial fraud case,” said Hillsborough District Attorney Andrew Warren.

“He gained access to Twitter accounts and to the internal controls of Twitter through compromising a Twitter employee.”

US Attorney David Anderson, of the Northern District of California, said there is a “a false belief” among hackers that they can pull off attacks like the Twitter hack “anonymously and without consequence.”

The charging announcement “demonstrates that the elation of nefarious hacking into a secure environment for fun or profit will be short-lived,” he said.
Newsletter

Related Articles

0:00
0:00
Close
French Debt Downgrade Piles Pressure on Macron’s New Prime Minister
US and UK Near Tech, Nuclear and Whisky Deals Ahead of Trump Trip
One in Three Europeans Now Uses TikTok, According to the Chinese Tech Giant
Could AI Nursing Robots Help Healthcare Staffing Shortages?
NATO Deploys ‘Eastern Sentry’ After Russian Drones Violate Polish Airspace
Anesthesiologist Left Operation Mid-Surgery to Have Sex with Nurse
Tens of Thousands of Young Chinese Get Up Every Morning and Go to Work Where They Do Nothing
The New Life of Novak Djokovic
The German Owner of Politico Mathias Döpfner Eyes Further U.S. Media Expansion After Axel Springer Restructuring
Suspect Arrested: Utah Man in Custody for Charlie Kirk’s Fatal Shooting
In a politically motivated trial: Bolsonaro Sentenced to 27 Years for Plotting Coup After 2022 Defeat
German police raid AfD lawmaker’s offices in inquiry over Chinese payments
Turkish authorities seize leading broadcaster amid fraud and tax investigation
Volkswagen launches aggressive strategy to fend off Chinese challenge in Europe’s EV market
ChatGPT CEO signals policy to alert authorities over suicidal youth after teen’s death
The British legal mafia hit back: Banksy mural of judge beating protester is scrubbed from London court
Surpassing Musk: Larry Ellison becomes the richest man in the world
Embarrassment for Starmer: He fired the ambassador photographed on Epstein’s 'pedophile island'
Manhunt after 'skilled sniper' shot Charlie Kirk. Footage: Suspect running on rooftop during panic
Effective Protest Results: Nepal’s Prime Minister Resigns as Youth-Led Unrest Shakes the Nation
Qatari prime minister says Netanyahu ‘killed any hope’ for Israeli hostages
King Charles and Prince Harry Share First In-Person Moment in 19 Months
Starmer Establishes Economic ‘Budget Board’ to Centralise Policy and Rebuild Business Trust
France Erupts in Mass ‘Block Everything’ Protests on New PM’s First Day
Poland Shoots Down Russian Drones in Airspace Violation During Ukraine Attack
Brazilian police say ex-President Bolsonaro had planned to flee to Argentina seeking asylum
Trinidad Leader Applauds U.S. Naval Strike and Advocates Forceful Action Against Traffickers
Kim Jong Un Oversees Final Test of New High-Thrust Solid-Fuel Rocket Engine
Apple Introduces Ultra-Thin iPhone Air, Enhanced 17 Series and New Health-Focused Wearables
Macron Appoints Sébastien Lecornu as Prime Minister Amid Budget Crisis and Political Turmoil
Supreme Court temporarily allows Trump to pause billions in foreign aid
Charlie Sheen says his father, Martin Sheen, turned him in to the police: 'The greatest betrayal possible'
Vatican hosts first Catholic LGBTQ pilgrimage
Apple Unveils iPhone 17 Series, iPhone Air, Apple Watch 11 and More at 'Awe Dropping' Event
Pig Heads Left Outside Multiple Paris Mosques in Outrage-Inducing Acts
Nvidia’s ‘Wow’ Factor Is Fading. The AI chip giant used to beat Wall Street expectations for earnings by a substantial margin. That trajectory is coming down to earth.
France joins Eurozone’s ‘periphery’ as turmoil deepens, say investors
On the Anniversary of Queen Elizabeth’s Death: Prince Harry Returns to Britain
France Faces New Political Crisis, again, as Prime Minister Bayrou Pushed Out
Murdoch Family Finalises $3.3 Billion Succession Pact, Ensuring Eldest Son’s Leadership
Big Oil Slashes Jobs and Investments Amid Prolonged Low Crude Prices
Court Staff Cover Up Banksy Image of Judge Beating a Protester
Social Media Access Curtailed in Turkey After CHP Calls for Rallies Following Police Blockade of Istanbul Headquarters
Nayib Bukele Points Out Belgian Hypocrisy as Brussels Considers Sending Army into the Streets
Elon Musk Poised to Become First Trillionaire Under Ambitious Tesla Pay Plan
France, at an Impasse, Heads Toward Another Government Collapse
Burning the Minister’s House Helped Protesters to Win Justice: Prabowo Fires Finance Minister in Wake of Indonesia Protests
Brazil Braces for Fallout from Bolsonaro Trial by corrupted judge
The Country That Got Too Rich? Public Spending Dominates Norway Election
Nearly 40 Years Later: Nike Changes the Legendary Slogan Just Do It
×