Summary: A Brazilian man has been indicted for cyber extortion after allegedly stealing sensitive customer data from a US-based company’s Brazilian subsidiary and demanding a ransom in bitcoin. The case highlights the increasing risks associated with data breaches and cyber threats targeting corporations.
Threat Actor: Junior Barros De Oliveira | Junior Barros De Oliveira
Key Point :
- De Oliveira hacked the subsidiary’s systems in March 2020, compromising data of approximately 300,000 individuals.
- In September 2020, he contacted company representatives, demanding over $3 million in bitcoin to keep the stolen data private.
- He faces eight federal charges, each carrying a potential five-year prison sentence and significant financial penalties.
A Brazilian citizen has been indicted by US authorities for cyber extortion after allegedly stealing confidential customer data from the Brazilian subsidiary of a US-based company and demanding millions in bitcoin to keep the data private.
The indictment alleges that Junior Barros De Oliveira hacked the computer systems of the subsidiary in March 2020 and obtained sensitive customer data for approximately 300,000 individuals. In September 2020, De Oliveira allegedly began contacting US representatives of the company, including its CEO, demanding over $3 million in bitcoin in exchange for keeping the stolen data confidential.
De Oliveira was charged with eight federal counts, including extortionate threats and threatening communications. Each count of making extortionate threats involving information obtained from protected computers carries a maximum penalty of five years in prison and a $250,000 fine or twice the financial loss or gain, whichever is greater. Additionally, each count of threatening communications carries a maximum sentence of two years in prison and a similar fine.
If convicted on all charges, De Oliveira could face a total of up to 28 years in prison and significant financial penalties.
Original Source: https://www.justice.gov/usao-nj/pr/brazilian-man-charged-making-extortionate-threats-publicize-stolen-data-obtained
Cyber Law and Cybercrime Investigation Blog: Immuniweb