Romanian gets 5 years in prison for hacking Oregon govt network
Romanian hacker sentenced to 5 years for breaching Oregon govt network and selling access
Run Oregon Department of Emergency Management?
Get an email when a reviewed story names Oregon Department of Emergency Management, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Catalin Dragomir, a 46-year-old Romanian national, was sentenced to 56 months in federal prison for hacking into the Oregon Department of Emergency Management network in June 2021 and selling unauthorized access to multiple U.S. victims. He stole personally identifiable information including names, email addresses, dates of birth, and passport numbers, causing total losses exceeding $250,000. Dragomir was arrested in Romania in November 2024 and extradited to the United States in January 2025.
The lesson from this incident
Full lessonA Romanian cybercriminal successfully infiltrated Oregon's Department of Emergency Management network and sold unauthorized access to other attackers, demonstrating critical failures in access control systems. The breach resulted in theft of sensitive personally identifiable information including names, email addresses, dates of birth, and passport numbers from government systems. This incident highlights how inadequate access controls on government networks can lead to cascading security failures when criminal groups monetize stolen access. The $250,000+ in damages underscores the real-world financial and privacy impact of compromised government data systems.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.