Former Brightly Contractor Found Guilty in $2.5 Million Data Extortion Scheme
Summary
Former Brightly contractor Cameron Curry was found guilty of stealing company data and threatening to leak employee information unless paid $2.5 million. Brightly paid $7,540 in Bitcoin, and the FBI seized electronic evidence.
Key points
- Curry used his contractor access to steal Brightly payroll information and other corporate data.
- After his contract ended, he sent more than 60 extortion emails demanding $2.5 million and threatening to leak the stolen information.
- The emails included screenshots showing employee names, dates of birth, home addresses, and compensation information.
- Brightly paid $7,540 in Bitcoin to a wallet controlled by Curry.
- After Brightly reported the incident, the FBI searched Curry’s residence and seized electronic devices containing evidence of the extortion scheme.
- Curry faces up to 12 years in prison for six counts of transmitting or causing interstate communications with intent to extort.
Article Details
- Victim Organization
- Brightly Software
- Victim Domain
- Not disclosed
- Incident Type
- Insider data theft and extortion
- Incident Date
- 2023-12-11
- Data Types Exposed
- Employee names
- Dates of birth
- Home addresses
- Compensation information
- Payroll information
- Corporate data
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- None reported
- Ransom Or Extortion
- Cameron Curry demanded $2.5 million and threatened to leak stolen information. Brightly paid $7,540 in Bitcoin to a wallet controlled by Curry.
- Claim Status
- confirmed
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
lootsoftware@outlook[.]com | Email address Curry used to send extortion messages threatening to leak Brightly data. |