DEF CON, one of the world's most prominent hacking conferences, has taken the decisive step of permanently banning three high-profile individuals from all future events: Pablos Holman, Vincenzo Iozzo, and Joichi 'Joi' Ito. The bans, announced on February 18, 2026, were enacted after their names and associations with the late financier and convicted sex offender Jeffrey Epstein were detailed in newly released U.S. Department of Justice (DOJ) documents. While none of the individuals are accused of criminal wrongdoing in relation to Epstein, the conference's action signifies a strong statement on community ethics and standards, aiming to sever any perceived ties between the hacker community and Epstein's criminal enterprise.
The action was prompted by the public release of DOJ files related to the Epstein case. These documents included correspondence and records showing Epstein's interest in the hacker community and his interactions with the banned individuals.
DEF CON added the three to its public "Banned Individuals" list, a move intended to enforce a code of conduct and maintain the integrity of the event. A spokesperson for Iozzo criticized the decision as a "rush to judgement" and "entirely performative," stating his interactions were professional and that he never witnessed illegal activity.
The primary organization taking action is DEF CON. The individuals affected are:
This event offers several points of guidance for organizations and professionals regarding ethics and compliance:
Joichi Ito resigns as director of the MIT Media Lab over his financial ties to Jeffrey Epstein.
DEF CON adds Pablos Holman, Vincenzo Iozzo, and Joichi Ito to its public list of banned individuals.

Cybersecurity professional with over 10 years of specialized experience in security operations, threat intelligence, incident response, and security automation. Expertise spans SOAR/XSOAR orchestration, threat intelligence platforms, SIEM/UEBA analytics, and building cyber fusion centers. Background includes technical enablement, solution architecture for enterprise and government clients, and implementing security automation workflows across IR, TIP, and SOC use cases.
Help others stay informed about cybersecurity threats
Every tactic, technique, and sub-technique used in this threat has been identified and mapped to the MITRE ATT&CK framework for consistent, actionable threat language.
Observables and indicators of compromise (IOCs) have been extracted and cataloged. Risk has been assessed and correlated with known threat actors and historical campaigns.
Detection rules, incident response steps, and D3FEND-aligned mitigation strategies are included so your team can act on this intelligence immediately.
Structured threat data is packaged as a STIX 2.1 bundle and can be visualized as an interactive graph — relationships between actors, malware, techniques, and indicators.
Sigma detection rules are derived from the threat techniques in this article and can be converted for deployment across any major SIEM or EDR platform.