> (I have no direct evidence of this except the majority of public arrest/sentencing of cyber criminals, and generally people in the blackhat and organized crim

> (I have no direct evidence of this except the majority of public arrest/sentencing of cyber criminals, and generally people in the blackhat and organized crime scenes are not teens) According to Wikipedia, the ages of the people arrested in connection with LulzSec were (sorted): 16 17 18 19 19 20 21 21 23 24 24 29. Plenty of teen representation there, and even low 20s is still pretty young. (Those ages are at the time of arrest, but most of the arrests were in 2011, the same year LulzSec was founded, so they would have been about the same age when they committed the crimes - albeit likely younger when they first got into the 'scene'.) Similarly, Lizard Squad: 16 17 17 22. (Main activities were in 2014; ages adjusted based on the number of years between then and the news articles specifying the ages.) Neither of those groups were terribly sophisticated (mainly performing DDoS attacks), but neither is the person(s) in the present case, who just culled passwords from old leaks and got the media to make a fuss. Anyway, getting arrested ≠ committing crimes. To get arrested, you have to (a) go after a high-profile target and (b) successfully attack them (where DDoS counts as an attack). Lots of kids do things like DoSing personal rivals (and their Minecraft servers), which is definitely a crime but unlikely to result in an arrest. The younger, the more petty...