Canadian Hacker Pleads Guilty
A significant case involving cybercrime reached a pivotal moment as Connor Riley Moucka, a 26-year-old from Kitchener, Ontario, confessed to his involvement in a substantial hacking and extortion scheme. This admission was made in a U.S. court, highlighting a complex operation targeting numerous organizations.
Massive Data Breach Unveiled
Prosecutors revealed that the cybercriminal operation, spanning from February to October 2024, compromised over 165 organizations. The campaign exposed billions of customer records, resulting in millions in ransom payments. The perpetrators utilized stolen credentials to infiltrate data managed by a U.S.-based software-as-a-service provider, affecting at least 165 clients.
The hackers extracted vast amounts of data, including sensitive personal and business information. The stolen records encompassed call histories, financial data, and personal identifiers like Social Security numbers, posing significant risks to individuals and businesses alike.
Extortion Tactics and Financial Impact
The group leveraged the stolen data to coerce organizations into paying ransoms, threatening public exposure of private information. This strategy yielded over $2.5 million in ransom payments, with Moucka personally receiving $495,000. In one instance, he allegedly attempted to re-extort a victim by threatening further data exposure.
The stolen data was also advertised on various cybercrime platforms, exacerbating the risk for affected parties. The financial toll on targeted businesses exceeded $9.5 million, not accounting for the impact on individual customers.
Legal Proceedings and Global Collaboration
Moucka pleaded guilty to multiple charges, including computer fraud and aggravated identity theft, with potential sentences reaching up to 32 years. His sentencing is scheduled for October 27. The investigation, led by the FBI and supported by international law enforcement agencies, underscores a global effort to combat cybercrime.
The case is part of the FBI’s Operation Riptide, aiming to dismantle criminal cyber networks. Moucka’s arrest and extradition from Canada in July 2025 marked a significant step in this ongoing operation.
The outcome of this case serves as a critical reminder of the vulnerabilities within cloud security and the importance of international cooperation in addressing cyber threats.
