Ex-soldier's telecom hacking spree earns him 70 months

Your personal call records may have been compromised or sold by hackers. This hacking spree demonstrates that even active-duty military personnel are capable of sophisticated cybercrime.

Cameron John Wagenius, a 22-year-old former US Army soldier, has been sentenced to 70 months in prison for a hacking spree targeting at least ten telecommunications companies and other organizations. While on active duty, stationed in South Korea and Texas, Wagenius conspired with three others to illegally access sensitive customer records and credentials between April 2023 and December 2024. The group used tools like SSH Brute and traded hundreds of credentials on platforms like Telegram, BreachForums, and X. They stole hundreds of thousands of customer records and attempted to extort over $1 million, while also successfully selling some data and using it for fraud, including SIM swapping. Wagenius also faces $294,978 in restitution and has been linked to the 2024 Snowflake extortion campaign, which impacted major companies like AT&T and Verizon.

This case highlights a concerning trend of individuals with military training leveraging their technical skills for criminal enterprises. The involvement of active-duty personnel suggests a potential vulnerability within military networks or a disturbing willingness by some to exploit their access and knowledge for personal gain. The multi-pronged approach, including credential theft, data exfiltration, extortion, and SIM swapping, underscores the evolving tactics of cybercriminals.

The widespread impact on telecommunications companies and the potential exposure of sensitive data from major players like AT&T and Verizon indicate systemic security challenges within the sector. The Justice Department's successful prosecution, despite the perpetrators' efforts to obscure their identities and activities through encrypted channels and dark web forums, offers a glimmer of hope for law enforcement's ability to combat such sophisticated cyberattacks.