Former US Soldier Sentenced to 70 Months in Prison for Hacking into AT&T and Verizon Systems
A disturbing case of cybercrime has come to an end with a 22-year-old former Army soldier being sentenced to 70 months in prison for hacking into the systems of two major wireless carriers, AT&T and Verizon. Cameron John Wagenius, who used the online moniker “kiberphant0m,” was found guilty of wire fraud conspiracy and extortion charges related to his activities between April 2023 and December 2024.
What’s particularly alarming about this case is that Wagenius was able to gain access to sensitive information, including call detail records of a government official. In November 2024, he publicly disclosed the confidential data and threatened to release additional records unless his demands were met. This type of cyber-extortion can have serious consequences for individuals and organizations whose sensitive information falls into the wrong hands.
According to court documents, Wagenius used a variety of tools, including the SSH Brute utility, to obtain credentials for systems belonging to at least 10 organizations. He then conspired with others to extort these victims by threatening to publish the stolen data on private and public forums. The cybercriminals also sold some of the stolen data via online forums and used it for other fraudulent activities.
Wagenius’s accomplices, including Canadian national Connor Riley Moucka and US citizen John Erin Binns, were involved in hacking into systems belonging to AT&T, Verizon, T-Mobile, and the Snowflake hacking campaign that affected hundreds of organizations. Moucka has already pleaded guilty to his role in the scheme. The conspirators attempted to extort at least $1 million from their victims.
The case serves as a reminder that cybercrime knows no boundaries, with individuals from various countries and backgrounds involved in these types of activities. It’s also a wake-up call for organizations to prioritize cybersecurity measures and protect sensitive information from falling into the wrong hands.
In addition to his prison sentence, Wagenius was ordered to pay $294,978 in restitution. This case highlights the importance of holding individuals accountable for their cybercrimes and the need for robust cybersecurity measures to prevent such incidents.
For individuals and organizations, this case serves as a reminder to be vigilant about protecting sensitive information from cyber threats. Regular security audits, employee training on cybersecurity best practices, and implementing robust access controls can go a long way in preventing such incidents.
Source: SecurityWeek — 2026-09-28