Alex Holden

This article is about the computer security researcher. For the aviator, see Alaska Coastal Airlines.

Alex Holden
Born	(1974-11-05) November 5, 1974 Ukraine
Nationality	Ukrainian
Occupation	Computer security researcher
Years active	2013–present
Known for	Uncovering 2014 Russian hacker password theft

Alex Holden (born November 5, 1974) is the owner of Hold Security, a computer security firm. As of 2015, the firm employs 16 people.

Life

In 1979, when Holden was five years old, Holden's family was denied permission to emigrate to the United States from Soviet Ukraine; this may have resulted in persecution for attempting to leave. However, seven years later the Chernobyl nuclear disaster led to mass evacuations, allowing the family to flee to Moldova, moving next to Italy, and finally the United States. In Italy, at 14, he missed a year of school to work in a farm. Holden later attended, but did not graduate from, the University of Wisconsin–Milwaukee. At the age of 27, Holden became the chief information security officer of Robert W. Baird & Co., a Milwaukee-based financial-services company that manages more than a hundred billion dollars of assets. Hold Security came into existence in February 2013, when a small security company called Cyopsis split in two.

Company Profile

Holden's firm Hold Security focuses on penetration testing and auditing for companies but also offers a unique service they call Deep Web Monitoring. In this service, the firm's analysts look for client's stolen login credentials, trade secrets, and any private employee or customer information that is circulating among hackers on the deep and dark web.

Notable investigations

POS Vendor Breaches

In August 2016, Holden's firm discovers evidence leading to breach of Oracle's MICROS POS along with a number of other victims. Discovery details the indicators of compromise of MICROS and other victims and potential data that could have been stolen from them.

2016 Alleged Email Credentials Cache

In 2016, Holden claimed to have uncovered a major cache of 272 million unique email addresses along with the passwords to their webmail accounts. Holden's news release was criticized when subsequent investigation by the webmail providers showed that almost none of the passwords were valid.

97 Dating Websites Breached

During the summer of 2015, Russian hackers breached 97 websites mostly made up of dating sites. Ashely Madison, the most prominent of these sites, had sensitive company information, emails, internal documents, and details of 30 million users stolen in this breach. Holden's firm were the ones who discovered the stolen information which they found on a server the hackers were using.

JP Morgan Breach

In the summer of 2014, JPMorgan Chase was attacked by a gang of Russian hackers who stole information compromising 76 million households and seven million small businesses. Holden and his firm were crucial in helping discover this intrusion uncovering a billion of passwords and usernames that the gang had stolen.

2014 Russian Hackers

Main article: 2014 Russian hacker password theft

In 2014, Holden and his firm discovered that a group of Russian hackers possessed 542 million stolen email addresses with 1.2 billion email-and-password combinations, the largest cache of stolen credentials discovered to date. Hold Security did not publicly name the victims, but at the request of The New York Times, an independent expert confirmed for the Times that the cache was authentic.

CorporateCarOnline Breach

In November 2013, Holden's firm discovered that the limousine software-as-a-service company Corporatecaronline had been hacked exposing credit card and personal information of nearly 1 million customers. Some of these customers include politicians, star athletes, and corporate executives. But, there were no indications that any of the information the hackers stole was abused in any way afterwards.

PR Newswire Breach

In October 2013, the same hackers that breached Adobe earlier that year did the same to PR Newswire. This group of hackers stole the usernames and encrypted passwords of the marketing and press release distribution service's customers. Holden and his firm were vital in the discover of this breach and the analysis of the stolen data from PR Newswire.

Adobe Systems Breach

Holden worked with cybersecurity journalist Brian Krebs to alert Adobe of the 2013 Adobe data breach, a theft of 2.9 million customer accounts and of the source code to some of Adobe's products. Adobe Systems publicly acknowledge the breach thanking Holden and Krebs for incident discovery.

Lexis Nexis, Dun & Bradstreet, HireRight/Kroll, and NW3C Breach

In 2013, popular data brokers like Lexis Nexis and the non-profit organization National White Collar Crime Center (NW3C) were compromised when operations of the underground criminal identity theft service ssndob[dot]ms was discovered. Hackers compromised systems within Lexis Nexis, Dun & Bradstreet, HireRight/Kroll, and NW3C stealing data and information. Holden and his firm were instrumental in discovering and analyzing the attack servers and breaches.

Credibility Issues

There has been evidence to suggest that Alex Holden has inflated figures, combined breaches, and invented hacker groups in order to obtain press and speaking positions. This has been pointed out as early as the alleged 2014 breaches. He has at various times claimed to possess degrees that he did not possess, attend schools he did not attend, and have been employed by employers who never contracted/employed him.