Hacker who sold UPMC employee data on the dark web pleads guilty

[FakeNoose]

2. Pittsburgh Post-Gazette coverage of same story

(link) https://www.post-gazette.com/news/crime-courts/2021/05/20/Hacker-stole-sold-UPMC-employee-data-admits-crimes-Justin-Sean-Johnson-detroit/stories/202105200148

This version contains many details on the involvement of a fellow-hacker from Venezuela, Yoandy Perez Llanes, who had previously been convicted in the case and deported. Also details on how Johnson was able to hack into the UPMC datafiles and steal the data.

Before Johnson tried to sell the employee's data, he used it in 2013 to file false income tax returns to steal the UPMC employees' refunds. The weird thing that tipped off the IRS was the repeated request that refund be placed on Amazon gift cards. That's the item the investigators used to break the case as they followed the Amazon purchases to Venezuela.

The international hacking case has developed over the last 7 years, with Justin Sean Johnson finally pleading guilty to 2 of the 49 federal charges. He'll be sentenced in 4 months. The refund scheme has cost the IRS an estimated $1.7 million and restitution will likely be part of the sentence.