Cameron John Wagenius, a former active-duty US Army soldier who ran a years-long cybercrime campaign from a base in Texas, was sentenced on 25 September to 70 months in prison over attacks and extortion attempts on telecom companies including AT&T, and was ordered to pay almost US$295,000 in restitution. He pleaded guilty in July 2025. Prosecutors said he leaked stolen call records of then-President Donald Trump as part of failed attempts to extort US$500,000 from AT&T, and that he and co-conspirators including extradition defendant Connor Moucka stole billions of sensitive records and received more than US$2.5 million in combined extortion payments. Victims were reached through the wider breach of more than 165 Snowflake customer environments and included AT&T, Ticketmaster, Advance Auto Parts and Santander. Before his December 2024 arrest, Wagenius also attempted to sell stolen data to a foreign intelligence service and sought information online about defecting to Russia, and used a self-developed credential-stealing tool called SSH Brute while on active duty.

• Source article