Cameron Curry, Cryptocurrency Extortion, North Carolina 2023

A disgruntled former data analyst is facing a potential prison term stretching into decades after a federal jury found him guilty of a brazen $2.5 million cryptocurrency extortion plot against his ex-employer. Cameron Curry, 27, of Charlotte, North Carolina, didn’t need guns or getaway cars – just a grudge and access to a trove of sensitive company data. The case underscores the escalating danger of “insider threats” in the increasingly vulnerable digital landscape.

Curry’s scheme began to unravel in December, shortly after the DC-based tech firm terminated his contract. Prosecutors presented evidence during the three-day trial that Curry, operating under the online alias “Loot,” launched a sustained campaign of threats, demanding payment in cryptocurrency to prevent a massive data breach. The company, which hasn’t been publicly identified, was targeted with explicit promises to publicly release confidential employee information – names, addresses, social security numbers – and proprietary corporate secrets. The intent, federal prosecutors argued, was clear: cripple the company’s reputation and inflict significant financial damage.

The emails sent by Curry weren’t subtle. According to court documents, he didn’t bother with coded language or vague allusions. He directly threatened to report a data breach to regulators and the media, and detailed how he would disseminate the stolen data to maximize harm. This wasn’t a casual threat; the feds believe Curry possessed the means to carry it out, given his prior access to the company’s systems. The targeted company immediately contacted the FBI after receiving the initial demands, triggering a swift investigation.

Federal agents executed a search warrant at Curry’s Charlotte residence on January 24th, seizing computers, phones, and other digital devices. The raid effectively halted the extortion attempt, but the damage to the company’s security and trust was already done. Investigators quickly linked the “Loot” alias to Curry through IP addresses and email metadata. While the company reportedly avoided paying the ransom, the investigation and remediation efforts following the threats undoubtedly cost them significant time and money.

The jury convicted Curry on six counts of interstate communication with intent to extort, a federal felony. Each count carries a maximum sentence of five years in prison, totaling a potential thirty-year sentence. However, sentencing guidelines will likely consider factors like Curry’s lack of prior criminal record and the extent of the actual damage caused (or avoided) by the company. The U.S. Attorney’s Office for the Western District of North Carolina has yet to announce a sentencing date, but legal experts anticipate a substantial prison term.

This case isn’t isolated. Federal authorities are seeing a surge in extortion attempts leveraging stolen data, often perpetrated by former employees seeking revenge or financial gain. The increasing reliance on third-party data storage and remote work arrangements has expanded the attack surface for these insider threats, making robust data security measures and thorough vetting of employees more critical than ever. The FBI’s Cyber Division is currently investigating dozens of similar cases nationwide.

Beyond the prison sentence, Curry could also face significant financial penalties. Federal courts can order defendants to forfeit assets obtained through illegal activities and may impose hefty fines. The company he targeted may also pursue civil litigation to recover costs associated with the data breach attempt and reputational damage. The case serves as a stark warning: in the digital age, a disgruntled employee with access to sensitive data can wield a weapon more dangerous than any physical threat.

The investigation was conducted by the Federal Bureau of Investigation (FBI), with assistance from the U.S. Attorney’s Office for the Western District of North Carolina. Assistant U.S. Attorney Erik Peterson led the prosecution. Curry’s defense attorney did not respond to requests for comment.

Source: U.S. Department of Justice

MORE FEDERAL CRIME NEWS

Cybercrime

Yannier Arias, Identity Theft and Credit Card Fraud, Florida 2016

Sep 6, 2016

Cybercrime

Jeff Zhang, Lying to Customs Officials, Kansas 2026

Apr 1, 2026

Cybercrime

Trevon Maurice Franklin, Copyright Infringement, California 2016

Jun 13, 2017

Cybercrime

Christopher Panagiotou-Scigliano, Wire Fraud, Idaho 2022

Aug 25, 2021