A Brazilian man has been charged in the U.S. for allegedly hacking a company’s network in March 2020 and threatening to release stolen customer data unless he was paid millions in Bitcoin.
Junior Barros De Oliveira, a 29-year-old from Curitiba, Brazil, faces charges for extortion and threatening communications, according to an indictment recently unsealed by the U.S. Department of Justice (DoJ).
The case involves a Brazilian branch of a New Jersey-based company. Authorities say De Oliveira hacked into the company’s systems multiple times, stealing sensitive data from about 300,000 customers.
In September 2020, he allegedly emailed the company’s CEO using a fake name, demanding 300 Bitcoin (worth $3.2 million at the time) to keep the data from being sold or leaked.
A month later, he sent similar emails to the CEO and another company executive, repeating his demands. In one message to a company representative, De Oliveira offered to “help fix the security issue” for a fee of 75 Bitcoin (worth $800,000 at the time) and included instructions for payment to a Bitcoin wallet.
If convicted, De Oliveira faces severe penalties. Each count of extortion carries up to 5 years in prison and a fine of $250,000 or twice the value of the damages caused, whichever is greater. Each count of threatening communication carries a maximum sentence of 2 years in prison and the same fine.
This case highlights the ongoing risks of cybercrime and the significant penalties for those who attempt to exploit sensitive data for financial gain.
