Carlos Ruiz-Rodriguez Pleads Guilty to Cyber Extortion

CINCINNATI — Carlos Ruiz-Rodriguez, 25, of Cincinnati, Ohio, has admitted to holding his former employer hostage in a digital blackmail scheme that exposed sensitive client data and company schematics. The call center employee turned cyber extortionist pleaded guilty to federal charges after a months-long campaign of threats, ransom demands, and data leaks from the dark web.

Ruiz-Rodriguez, who worked at the Cincinnati-based company for roughly two years, exploited his access to the firm’s customer service portal to siphon off proprietary information and personally identifiable details of clients. That access became his weapon. Between November 2015 and January 2016, he launched a series of extortion emails sent over the internet, each containing proof that he had breached the company’s systems.

In the messages, Ruiz-Rodriguez demanded Bitcoin payments, threatening to dump the stolen schematics and client records online if his demands went unmet. When the company resisted, he followed through — posting the data on a dark web forum, a move meant to ratchet up pressure and prove he wasn’t bluffing.

The tactic worked. The company paid up — twice — sending Ruiz-Rodriguez a total of approximately $15,000 in ransom payments. The money flowed into encrypted digital wallets, but federal investigators eventually traced the transactions back to him through forensic cyber analysis conducted by the FBI’s Cincinnati Division.

Benjamin C. Glassman, United States Attorney for the Southern District of Ohio, confirmed the plea entered today before U.S. District Judge Michael R. Barrett. Angela L. Byers, Special Agent in Charge of the FBI in Cincinnati, underscored the growing threat posed by insider threats with technical access. Ruiz-Rodriguez now faces up to two years in federal prison for the crime of extortion.

The case was investigated by the FBI and prosecuted by Assistant United States Attorney Tim Mangan. U.S. Attorney Glassman praised both the investigative rigor and digital forensics that brought Ruiz-Rodriguez to justice, warning that employees abusing system access for personal gain will be met with full federal prosecution.