Overview
- Connor Riley Moucka pleaded guilty Wednesday to computer fraud, wire fraud, aggravated identity theft and conspiracy and is set for sentencing on Oct. 27, 2026.
- U.S. prosecutors say Moucka and co‑conspirators used login credentials harvested by infostealer malware to access at least 165 customer environments and steal terabytes of data tied to more than 100 million people.
- The group extorted victims for more than $2.5 million in crypto, Moucka personally received at least $495,000, and targeted companies reported over $9.5 million in direct losses.
- At least one victim was re‑extorted using stolen records tied to a government officer and family members, and the actors sold data on cybercrime forums and Telegram to increase pressure and profit.
- Law enforcement in the U.S., Canada, Australia, Spain, Ukraine and Turkey worked on the case, and the campaign led the affected cloud provider to roll out mandatory multi‑factor authentication and stricter password rules.