Former Brightly Contractor Sentenced for Data Theft and Extortion

· Original article ↗

Summary

Former Brightly Software contractor Cameron Curry was sentenced to two years in prison after being convicted of stealing company data and demanding $2.5 million in cryptocurrency. Brightly paid him $7,540 in Bitcoin.

Key points

  • Curry accessed payroll information and corporate data while working as a contractor, then used stolen documents to extort Brightly after his contract ended.
  • Using the alias “Loot,” he threatened to leak employee personal and compensation information and report Brightly to the SEC unless paid $2.5 million in cryptocurrency.
  • Brightly transferred $7,540 in Bitcoin to a wallet controlled by Curry.
  • After Brightly reported the incident, the FBI searched Curry’s residence and seized electronic devices containing evidence linking him to the scheme.
  • Curry was found guilty and sentenced to two years in prison.

Article Details

Victim Organization
Brightly Software
Incident Type
Insider data theft and extortion
Incident Date
2023-12-11
Data Types Exposed
  • Employee names
  • Dates of birth
  • Home addresses
  • Compensation information
  • Payroll and corporate data
Affected Records
Not disclosed
Affected Data Size
Not disclosed
Operational Impact
Cameron Curry stole sensitive payroll and corporate data and used it to extort Brightly. The FBI later searched his residence and seized electronic devices containing evidence linked to the scheme.
Ransom Or Extortion
Curry demanded $2.5 million in cryptocurrency and threatened to leak employee information and report Brightly to the SEC. Brightly paid $7,540 in Bitcoin to a wallet controlled by Curry.
Claim Status
confirmed

Indicators of compromise

TypeIndicatorContext
EMAILlootsoftware@outlook[.]comEmail address Curry used under the alias “Loot” to send extortion messages to Brightly employees.

Threat Actors