The problem I have is that I still don’t know what the accusations are. … Because of DEF CON’s lack of transparency and communication, I can only respectfully disagree with their ban. But I am not trying to feed the negativity that surrounds this situation.
Chris Hadnagy, official statement on his own site, February 25, 2022 — social-engineer.org
Those criticisms are fair. I could have handled situations like these a lot better. I take full ownership of my past mistakes and I believe that I have grown since then and I commit to doing better.
Same statement — on criticisms of his training courses and his responses to bad reviews from 2015 and 2017, the one category he conceded — social-engineer.org
The specimen, observed 2010–2022 in the ballroom twilight of Las Vegas, teaching trust extraction to sold-out rooms. Banned from the very habitat in which it was the apex demonstrator.
What you are about to see is a complete behavioral cycle: display, dominance, expulsion, and the long, expensive ritual that follows expulsion. The specimen is a social engineering trainer — a professional student of misplaced trust, which he taught, by every account skillfully, to thousands.
It is impossible for a normal functioning human to keep track of what happened next. That is why the archive exists. Every event below carries its receipt. Both sides get the microphone.
ACT I — THE DISPLAY YEARS (2010–2021)
Over many seasons the male constructs a display structure of unusual size: a Village at the largest hacking gathering on Earth, two books, a training company, a following. The community, as communities will, mistakes the display for the animal.
The display structure goes up
Publishes Social Engineering: The Art of Human Hacking (Wiley), founds social-engineer.org, and runs the first social-engineering capture-the-flag at DEF CON 18 — the seed of the Social Engineering Village.
Apex demonstrator
The SEVillage becomes a DEF CON fixture; Social-Engineer LLC trains corporate clients; a second Wiley edition, The Science of Human Hacking, ships in 2018. His DEF CON 29 talk teaches elicitation — getting a target to volunteer information "without asking."
Note the plumage. The handle is @humanhacker. This species does not hide. It advertises.
ACT II — THE EXPULSION (2022)
February. The habitat closes to him without ceremony — four sentences in a transparency report. Observe the stillness. It does not last.
DEF CON bans its own Village founder
DEF CON's transparency report announces a permanent ban for multiple Code of Conduct violations. TechTarget reports the conference received accounts from more than a dozen people. DEF CON publishes no specifics — a silence both sides will spend three years litigating.
The specimen sues the habitat
Hadnagy files a defamation suit against DEF CON and founder Jeff Moss, asserting the ban announcement was false and ruinous to his business. The case lands, after transfer, in the Western District of Washington.
Denied the watering hole, the male attempts the costliest maneuver in the repertoire: the defamation suit. Few attempt it. Fewer survive discovery.
ACT III — THE LITIGATION DANCE (2025)
Discovery is the great predator of the litigious. It eats what it is fed, and it is the plaintiff who must feed it.
The filings surface
Pre-trial filings become public. Witness declarations describe verbal abuse and sexual harassment of coworkers; his former COO testifies that "there was almost never a day in my entire four years working for Hadnagy that I was not either enraged or embarrassed." The allegations are sworn testimony — contested by the subject, tested by no criminal court.
Dismissed, with prejudice
A federal judge grants summary judgment: Hadnagy could not carry his burden of showing DEF CON's statements were false, and truth is an absolute defense. "With prejudice" bars refiling. The suit he brought to clear the record instead placed the declarations into it, permanently and publicly.
The dance ends as these dances usually end: the specimen has paid three years and considerable treasure to publish the very material it sued to suppress.
The specimen survives
The training business continues in corporate habitats where a DEF CON ban carries no scent. The books remain in print. The archive keeps the tape running.
DEF CON's stated basis (theirs, not ours): multiple Code of Conduct violation reports, per its February 2022 transparency report; TechTarget counted accounts from more than a dozen people [1] [3].
The court record: witness declarations filed in the case describe verbal abuse, harassment of female coworkers, and retaliation against a departing employee, as reported by The Register [4].
The adjudicated fact: in May 2025 a federal judge dismissed his defamation suit with prejudice — he could not show DEF CON's statements were false [2] [5].
Hadnagy denies the allegations of misconduct. His complaint asserted DEF CON's announcement was false, that the conference never provided him specifics, and that the ban destroyed his livelihood [6].
Scope of the ruling: the dismissal decided his claim — that he could not prove falsity. It is not a criminal conviction, and no criminal charge has ever been filed. The declarations remain testimony, not findings against him.
His company operates today; the Wiley texts remain standard training material [10].
Scoped to the claims, never the man. The claim "DEF CON defamed Hadnagy" went before a federal judge and lost, with prejudice — that one is settled. The claims in the declarations remain sworn, contested, and criminally untested.
Weigh the costly signals: he spent three years of litigation to lose; DEF CON spent the same three years declining to retract a single word.
The archive does not judge. The archive merely keeps the tape running.
PRIMARY RECORD
PRESS & LEGAL ANALYSIS
SUBJECT'S OWN CHANNELS — THE SPECIMEN, UNEDITED