Brazilian Citizen Charged with Extortion After Hacking Brazilian Subsidiary of US Company

2024-12-27

A Brazilian citizen, Junior Barros De Oliveira, 29, has been indicted by the U.S. government for allegedly threatening to release sensitive data stolen from a Brazilian subsidiary of a New Jersey company.

The indictment, unsealed in Newark federal court, charges De Oliveira with four counts of extortionate threats involving information obtained from protected computers and four counts of threatening communications.

According to the U.S. Department of Justice, in March 2020, De Oliveira breached the company’s systems and stole personal data belonging to over 300,000 customers. Subsequently, in September 2020, he demanded a $3 million ransom in Bitcoin from U.S. executives, including the CEO, threatening to publicly release the stolen information if the demand was not met.

The indictment details how De Oliveira gained unauthorized access to the company’s computer systems and obtained confidential customer information.

Each count of extortion carries a maximum sentence of five years in prison and a $250,000 fine, while the threat charges carry a maximum sentence of two years and the same fine.

This case highlights the increasing severity of cybercrime and the global reach of law enforcement in combating these threats.

What Undercode Says:

This incident underscores the evolving tactics employed by cybercriminals. While traditional ransomware attacks often involve encrypting data and demanding a ransom for its decryption, this case demonstrates a shift towards a more public form of extortion.

By threatening to publicly release sensitive customer data, De Oliveira aimed to inflict significant reputational and financial damage on the company. This tactic, known as “doxing,” can have severe consequences for businesses, including data breaches, customer loss, and legal repercussions.

Furthermore, this case highlights the transnational nature of cybercrime. The victim company was a U.S. entity, while the alleged perpetrator is a Brazilian citizen. This underscores the need for international cooperation and collaboration between law enforcement agencies to effectively combat cybercrime across borders.

The indictment of De Oliveira serves as a strong message that such criminal activity will not be tolerated. It demonstrates the commitment of law enforcement agencies to investigate and prosecute cybercriminals, regardless of their location.

This case also serves as a reminder for businesses of the importance of robust cybersecurity measures. Implementing strong security protocols, such as regular security audits, employee training, and robust data encryption, can help mitigate the risk of cyberattacks and protect sensitive data.

The ongoing evolution of cyber threats necessitates a proactive and adaptable approach to cybersecurity. Businesses must continuously assess and enhance their security measures to stay ahead of emerging threats and protect themselves from the devastating consequences of cyberattacks.