Overview
- Federal prosecutors unsealed an indictment Friday charging 41-year-old Matthew Bathula with two counts of computer intrusion and one count of aggravated identity theft tied to about 195 victims.
- The filing says he used keyloggers, cookie managers, mailbox rules that erased “Critical Security Alert” emails, and file‑masquerading tactics to grab passwords and data from July 2016 through September 2024.
- It also accuses him of running spyware from February 2023 to July 2024 to secretly record coworkers without consent, including people who were breast‑pumping, and to collect images and videos.
- Bathula worked at the University of Maryland Medical Center from 2011 to 2024 and was fired in October 2024 after hospital technology staff detected the activity, and he remains presumed innocent.
- A class-action filed April 3, 2025, alleges the medical system failed to stop the breach and to warn staff, with plaintiffs saying some victims’ home cameras were hijacked.