Kevin Mitnick

hackingsecurity

The 1990s hacker whose social-engineering exploits made him the era's most famous computer intruder.

Mitnick broke into corporate networks largely by manipulating people rather than machines, became a fugitive, and was arrested in 1995 after a high-profile hunt. He later reinvented himself as a security consultant and author, making 'the human is the weakest link' a lasting lesson.

Kevin Mitnick became the most publicized computer criminal of the 1990s, was pursued in a manhunt that produced books and a film, served five years including an extended period in solitary confinement, and later ran a security consultancy and wrote about the techniques he had used.

The technical detail that matters is that most of what he did was not technical. His effectiveness came from social engineering: phoning employees, sounding like a colleague, knowing enough internal vocabulary to be plausible, and asking for what he wanted. Systems that were hard to attack directly were straightforward to enter through someone who worked there and wanted to be helpful.

The case is also a study in proportion. Claims made during the prosecution, including that he could launch missiles by whistling into a phone, were absurd and shaped both his sentence and public understanding of what hackers could do. That distortion pushed policy in directions still visible in computer crime law. His later career is the more useful legacy: he made social engineering a taught discipline rather than folklore, and the awareness training industry that followed is largely built on the point he proved.

Also known as: Mitnick, Condor

← All glossary entries