Former Army Soldier Gets 70-Month Prison Term for Multi‑Company Cyber Attacks

A federal court sentenced former Army service member Cameron John Wagenius to 70 months behind bars Friday, concluding a multi‑year investigation into a string of cyber intrusions and extortion attempts targeting several high‑profile corporations, including a major telecommunications provider.

According to the Justice Department, Wagenius leveraged his technical background to infiltrate the networks of AT&T, Snowflake and other large firms, stealing data and demanding payment to prevent public disclosure. The attacks, which spanned several years, involved the deployment of ransomware‑type malware and the exploitation of weak authentication protocols.

Prosecutors said the scheme began while Wagenius was still enlisted, using his military‑trained skills to bypass security measures. After leaving the service, he continued the campaign, reportedly earning thousands of dollars through illicit payments. The court heard that some of the compromised information included internal communications and customer data, though the full scope of the breach remains under investigation.

Legal experts note that the sentence reflects a growing emphasis on punishing cyber‑related offenses that cause significant economic harm. While 70 months falls short of the maximum penalties available for certain computer‑fraud statutes, the judge highlighted the “serious and sustained nature” of the conduct and the potential damage to public trust in essential service providers.

The case underscores a broader trend of former military personnel being implicated in cybercrime, prompting both the Department of Defense and law‑enforcement agencies to tighten monitoring of former service members’ access to sensitive tools. Cybersecurity firms have warned that the expertise gained in the armed forces can be repurposed for illicit activities if proper oversight is lacking.

Federal authorities indicated that the investigation is ongoing, with additional suspects potentially linked to the same network of attacks. As companies continue to fortify their defenses against sophisticated threats, the sentencing serves as a reminder that the legal consequences for digital transgressions are intensifying, aiming to deter future incursions into critical infrastructure.