LEGAL STATUS
Pleaded guilty (Feb 2, 2023). Sentenced to six years in prison, 3 years' supervised release and $1,590,487 restitution (May 10, 2023).1
AS OF 2026-10-20
Case-file story
Timeline
- 2018-08Employed by Company-1 from about this date1
- 2020-12Steals gigabytes of data using administrative access1
- 2021-04-01Employment ends, on or about this date1
- 2023-02-02Pleads guilty2
- 2023-05-10Sentenced to six years1
Verified facts
- While purportedly remediating the breach he created, he extorted the company as an anonymous hacker for nearly $2 million.1
- Posing as an anonymous whistleblower, he caused misleading news articles. These were followed by a loss of over $4 billion in market capitalization, per DOJ.1
- He was a senior developer with access to the company's AWS and GitHub credentials.1
Editorial notes
- DOJ calls the employer "Company-1." This site uses DOJ's anonymization and does not repeat press identifications.