Romanian Hacker Pleads Guilty to Oregon Emergency Management Breach

Feb 21, 2026 · Original article ↗

Summary

Catalin Dragomir pleaded guilty to computer intrusion and aggravated identity theft tied to Oregon’s emergency management network. Prosecutors said he sold administrative access and shared an employee’s personal data.

Key points

Dragomir pleaded guilty to obtaining information from a protected computer and aggravated identity theft.
Prosecutors said he offered administrative credentials for Oregon’s Office of Emergency Management on cybercriminal platforms and sold access for $3,000 in Bitcoin.
To demonstrate access, he repeatedly entered the network and sent screenshots and an employee’s login information, name, date of birth, Social Security number, and email address.
The article says Dragomir also hacked 10 other U.S. companies, causing at least $250,000 in losses.
He was arrested in Romania in November 2024, extradited to the U.S., and faces up to seven years in prison, with sentencing expected in May.

Article Details

Event Type: Criminal case: Catalin Dragomir pleaded guilty to breaching Oregon’s Office of Emergency Management network and aggravated identity theft.
Impact: Dragomir admitted to the Oregon breach, where an employee’s personal information was exposed, and the article reports that he also hacked 10 other U.S. companies, causing at least $250,000 in losses. He faces up to seven years in prison. Separately, a ransomware attack forced the University of Mississippi Medical Center to close all 35 clinic locations and cancel elective and outpatient services; its hospitals and emergency departments remained operational using downtime procedures.

People

LouAnn WoodwardA senior official at UMMC who confirmed at a press conference that the organization was experiencing a ransomware attack and described its communications with the attackers.

Threat Actors

Catalin DragomirPleaded guilty to obtaining information from a protected computer and aggravated identity theft in connection with the Oregon Office of Emergency Management breach. Prosecutors said he offered initial access services under the online moniker “inthematrixl” and others; the article also reports that he hacked 10 other U.S. companies.

Countries

RomaniaHe was arrested in Romania in November 2024, extradited to the U.S., and faces sentencing in May with up to seven years in prison.United StatesHe admitted to breaching 10 other U.S. companies causing at least $250,000 in losses and faces up to seven years in prison amid a wave of recent local government and hospital cyberattacks.

Industries

Governmentcompanies causing at least $250,000 in losses and faces up to seven years in prison amid a wave of recent local government and hospital cyberattacks.