And we do! Usually it’s American/British kids that get caught after going after high profile targets because they’re kids and they’re dumb. Some of the more well known groups (e.g. Scattered Spider, The Com) specifically recruit minors to do the hands on keyboard operations because they’re less likely to get time than adults. Most resourced hackers are not stupid enough to launch operations against Western organizations from countries with extradition agreements.

https://cybernews.com/cybercrime/scattered-spider-mgm-hackers-indictment/

https://krebsonsecurity.com/2025/07/uk-charges-four-in-scattered-spider-ransom-group/

https://www.bleepingcomputer.com/news/security/scattered-spider-hacker-gets-sentenced-to-10-years-in-prison/

I took a trip to Mumbai last year and immediately developed a cold after arriving. When I mentioned it to my friends I was there to see they said that’s totally normal for people visiting just due to the air pollution. It’s no joke.

And then imagine living in New Delhi where the air pollution is on average nearly 3x worse than Mumbai.

There’s nothing to be gained from Cloudflare lying about this. It honestly makes them look worse if the outage was caused internally vs if it had been due to an attack