In the world of cybersecurity, the greatest threats are often assumed to come from sophisticated hacking groups or foreign intelligence agencies. However, in 2015, a group of teenagers—some as young as 15—shocked the world by breaching the personal accounts of some of the most powerful figures in the U.S. government. This group, calling themselves “Crackas With Attitude” (CWA), managed to infiltrate the personal accounts of then-CIA Director John Brennan, along with other high-ranking officials from the FBI and the Department of Homeland Security (DHS).
This is the remarkable story of how a group of kids, armed with little more than social engineering skills and persistence, managed to embarrass the world’s most powerful intelligence agency.
Meet the Mastermind: Kane Gamble
At the center of this hacking operation was a British teenager named Kane Gamble, who was just 15 years old when he and his team orchestrated one of the most shocking cyber-intrusions in recent history. Gamble, who grew up in Leicester, England, had no formal training in hacking but was deeply interested in politics and cybersecurity. He held strong opinions about U.S. foreign policy, particularly regarding Palestine and Iraq, and wanted to expose what he saw as injustices committed by American intelligence agencies.
Along with his online associates, Gamble formed Crackas With Attitude (CWA), a small but determined hacking group. Their mission? To prove that even the most secure government agencies could be vulnerable to cyberattacks.
How They Hacked the CIA Director
Unlike the Hollywood stereotype of hackers using high-tech software to break into systems, CWA’s approach relied primarily on social engineering—a method of manipulating people into revealing confidential information.
One of their most audacious hacks was the infiltration of John Brennan’s personal AOL email account. Given Brennan’s role as the Director of the CIA, one would assume his online security was impenetrable. But CWA proved otherwise.
Step 1: Impersonation
Gamble and his team posed as Verizon employees—the telecom provider Brennan used. By calling Verizon’s customer service, they managed to obtain Brennan’s personal information, including his phone number and other account details.
Step 2: Password Reset
With these details in hand, the hackers called AOL’s customer service and pretended to be Brennan himself, claiming that they had forgotten their password. By using the information obtained from Verizon, they convinced the AOL representative to reset the password and grant them access.
Step 3: Leaking Sensitive Documents
Once inside Brennan’s email, the hackers found a trove of sensitive documents, including:
- A 47-page application for a top-secret security clearance
- Emails between Brennan and other intelligence officials
- Documents discussing torture methods used by the U.S. government
CWA leaked these documents online and shared them with journalists, causing a major scandal. The fact that the Director of the CIA had his personal account hacked by teenagers raised serious concerns about cybersecurity weaknesses at the highest levels of government.
Other High-Profile Hacks
Emboldened by their success with Brennan, CWA targeted other top U.S. officials, including:
- James Clapper (then-Director of National Intelligence)
- Jeh Johnson (then-Secretary of Homeland Security)
- Mark Giuliano (then-Deputy Director of the FBI)
For Clapper, the hackers redirected his home phone calls to the Free Palestine Movement, a pro-Palestinian activist group. In the case of FBI Deputy Director Mark Giuliano, the hackers leaked his personal contacts and voicemail messages.
Motivations: Cyber Warfare or Activism?
Kane Gamble and his group did not act out of financial motivation. Unlike many hackers who seek monetary gain, CWA saw themselves as hacktivists—using hacking as a tool to expose what they believed to be wrongdoing by the U.S. government.
In several online exchanges, Gamble and his group criticized U.S. actions in the Middle East, particularly in Palestine. In a Twitter message, he once wrote:
“We are doing this because the government has committed crimes and covered them up.”
Despite their motivations, their actions severely embarrassed the intelligence community and exposed serious weaknesses in personal cybersecurity among top U.S. officials.
The Crackdown: How the U.S. and U.K. Caught Them
The hacking spree did not go unnoticed. After months of investigations by both U.S. and British authorities, law enforcement tracked down Gamble in October 2016.
Unlike the image of a sophisticated cybercriminal working from an underground bunker, authorities discovered that Gamble had conducted all his hacking activities from his bedroom in his parents’ house in Leicestershire, England.
In 2018, Gamble pleaded guilty to multiple hacking-related charges, including:
- Gaining unauthorized access to computer systems
- Leaking confidential information
- Harassment of U.S. government officials
He was sentenced to two years in a youth detention center in the U.K. Other members of CWA also faced legal consequences, with some being arrested in the United States.
The Aftermath: Lessons from the CIA Hack
The “Crackas With Attitude” case was a wake-up call for intelligence agencies around the world. If a group of teenagers could breach the personal accounts of top U.S. intelligence officials, what could more advanced adversaries—such as state-sponsored hackers from Russia or China—achieve?
Key Takeaways:
- Personal Security is a National Security Issue
- Many high-ranking officials use personal email accounts for sensitive communications. This breach highlighted the dangers of mixing personal and professional digital activities.
- Social Engineering is More Dangerous Than You Think
- Hackers did not need sophisticated software; they manipulated customer service representatives into giving them access.
- Cybersecurity Needs to Be a Priority at All Levels
- The U.S. government strengthened its cybersecurity protocols after this attack, ensuring that high-ranking officials receive special training on securing their personal accounts.
The Legacy of the Kids Who Hacked the CIA
The story of “Crackas With Attitude” is not just a cautionary tale about cybersecurity vulnerabilities—it’s a testament to the power of persistence, intelligence, and social engineering. What started as a group of teenagers playing around with hacking tools became one of the biggest cyber embarrassments in U.S. intelligence history.
While their methods were illegal, their actions exposed critical security flaws that governments around the world had to address. Today, cybersecurity remains one of the most pressing national security concerns, and the case of CWA serves as a reminder that even the most powerful institutions are not invincible.
For those in power, the biggest lesson is clear: in the digital age, no one is untouchable.