Romanian Hacker Pleads Guilty to Selling Access to US State Network Vulnerability Exploitation
Romanian National Pleads Guilty to Selling Unauthorized Access to US State Government Network
Romanian National Admits to Cybercrime
A Romanian national has admitted to selling unauthorized access to a US state government network, resulting in significant financial losses and compromising sensitive personal data.
Details of the Crime
Catalin Dragomir, 45, of Constanta, Romania, gained access to the Oregon state government’s emergency management department network in June 2021. He then advertised administrative access to the network, negotiating a $3,000 sale in Bitcoin with a prospective buyer. To verify the legitimacy of his claim, Dragomir accessed the network multiple times, providing the buyer with samples of personal identifying information extracted from the compromised system. This included an employee’s login credentials, name, address, and Social Security number.
Arrest, Charges, and Sentencing
He was arrested in Romania in November 2024 and extradited to the US in January 2025. Dragomir was charged with five counts of obtaining information from a protected computer, aggravated identity theft, and money laundering in May 2024.
On Friday, the US Department of Justice announced that Dragomir pleaded guilty to information theft and aggravated identity theft. He has agreed to pay full restitution to his victims. Dragomir faces up to seven years in prison, a fine of up to $250,000, and one year of supervised release. His sentencing is scheduled for May 26.
Significance of the Case
Dragomir’s guilty plea marks a significant development in the case, highlighting the severity of cybercrime and the importance of holding perpetrators accountable. The incident also underscores the need for robust cybersecurity measures to protect sensitive information and prevent unauthorized access to government networks.
