Brazilian Hacker Charged for Selling Data Stolen From Hacked Computers

Junior Barros De Oliveira, a 29-year-old resident of Curitiba, Brazil, has been indicted in the United States for orchestrating an extortion scheme involving data stolen from the computer systems of a Brazilian subsidiary of a New Jersey-based company.

U.S. Attorney Philip R. Sellinger announced the charges after the indictment was unsealed in Newark federal court.

Allegations of Cybercrime

According to the indictment, in March 2020, De Oliveira gained unauthorized access to the computer systems of the victimized company, referred to as “Victim 1-Brazil.”

The hacker allegedly exploited this access to steal confidential customer data involving approximately 300,000 individuals.

2024 MITRE ATT&CK Evaluation Results for SMEs & MSPs -> Download Free Guide

The stolen data included information that the company had a legal and ethical obligation to protect.

By September 2020, De Oliveira allegedly began contacting U.S. company representatives, including its CEO, demanding $3 million in Bitcoin. He reportedly threatened to publicize the stolen data if his demands were unmet.

The extortion attempt, outlined in the indictment, underscores the growing threat of cyberattacks targeting global corporations.

De Oliveira faces eight federal charges: four counts of making extortionate threats involving information obtained from protected computers under Title 18, Section 1030(a)(7)(B), and four counts of threatening communications under Title 18, Section 875(d).

Each count of extortionate threats carries a maximum penalty of five years in prison and a $250,000 fine, or twice the financial gain or loss, whichever is greater.

Each count of threatening communications carries a maximum penalty of two years in prison and the same financial penalties.

If convicted on all counts, De Oliveira could face significant prison time and financial repercussions for his alleged crimes. However, as emphasized in the announcement, the charges are accusations, and the defendant is presumed innocent unless proven guilty in a court of law.

The successful investigation is credited to the Federal Bureau of Investigation (FBI), whose Newark Field Office played a pivotal role.

Acting Special Agent in Charge Nelson I. Delgado and his team collaborated closely with U.S. Attorney Sellinger’s Cybercrime Unit, represented by Assistant U.S. Attorney David E. Malagold.

This case highlights the increasing sophistication of cybercriminals operating across international borders.

It also underscores the collaborative efforts required between governments, law enforcement, and private companies to combat cyber-related crimes.

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free