The case involved stolen credentials and attempted extortion against multiple organizations; a prison sentence and restitution order now add to earlier guilty pleas.
Former Army soldier Cameron John Wagenius was sentenced September 25 to 70 months in prison and ordered to pay $294,978 in restitution, the Justice Department announced. DOJ announcement.
The case concerned data stolen from telecommunications companies’ databases. DOJ describes a stolen-credential campaign against at least 10 organizations from April 2023 through December 18, 2024, and at least $1 million in attempted extortion. Wagenius pleaded guilty in separate cases on March 5 and July 15, 2025. The FBI and Defense Criminal Investigative Service investigated, with Army assistance. Victims’ recovery is not detailed. Case account.
For an organization storing sensitive records in cloud services, Layer8’s Cybersecurity offering could support a bounded assessment and implementation pilot. Our proposed work would pair each account with a responsible owner, restrict access to approved roles and document who can revoke it when compromise is suspected. The record owner would approve which information each role may use before changes begin.
A useful acceptance exercise would use agreed test accounts and harmless records. An authorized user should reach only approved information; a restricted account should be denied. Then revoke a test account and check that access actually stops across the agreed services, including any existing session covered by the platform’s controls.
The owner should receive the evidence and accept any remaining exceptions. Those checks could reduce unauthorized access and improve containment, but they cannot guarantee a different outcome for the organizations in this case.
Revised source: DOJ updated its announcement September 30, 2026.