U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
US soldier sentenced to 70 months for hacking AT&T and Verizon.
A U.S. Army soldier, Cameron Wagenius, also known as 'Kiberphant0m,' has been sentenced to 70 months in federal prison and ordered to pay nearly $300,000 in restitution for hacking into telecommunications companies. He stole call and text metadata for over 100 million AT&T customers and extorted companies, even threatening to release national security secrets. Wagenius was stationed in South Korea and worked with alleged co-conspirators, including Kenneth Schuchman, who has a history of cybercrime.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AT&T?
Get an email when a new story names AT&T, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCameron Wagenius, a U.S. Army soldier with privileged access to sensitive systems, leveraged his position and technical knowledge to infiltrate major telecommunications providers and steal metadata belonging to over 100 million customers. This case highlights the severe risks posed by insider threats, particularly when individuals with security clearances or technical roles engage in malicious activity outside their sanctioned duties. The ability to exfiltrate massive datasets and then weaponize them through extortion — including threats to expose national security secrets — underscores the catastrophic consequences of inadequate insider threat monitoring and overly broad data access privileges. Organizations must never assume that trusted employees, contractors, or affiliated personnel are immune to becoming threat actors.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Satori botnet