A tech worker who hatched an elaborate insider attack in late 2023 and attempted to extort Brightly Software for about $2.5 million was sentenced to two years in prison, the Justice Department said Thursday.
Cameron Nicholas Curry, also known as “Loot,” committed a series of crimes while working as a data analyst contractor for the Siemens-owned company. The 27-year-old North Carolina man stole a trove of corporate data, including sensitive employee and compensation information, which he used to threaten various employees and executives over a six-week period in late 2023 and early 2024.
Curry ultimately extorted the company for $7,540.92 in late January 2024. He was found guilty of six counts of extortion in March.
Brightly Software was named as the victim in court records filed in the U.S. District Court for the Western District of North Carolina earlier this month. The asset and maintenance management software provider, which Siemens acquired in 2022, did not immediately respond to a request for comment.
The insider attack illustrates risks companies accept when employees, or contractors placed in roles by a third-party recruitment company, are allowed to access sensitive data on a company-owned laptop.
Prosecutors said Curry used his access to the company’s network to remove corporate data for extortion while he worked for the company between August and December 2023. Curry started sending threatening emails to Brightly Software employees immediately following his last day of employment, and demanded a ransom to not leak and destroy the data.
Curry sent more than 60 emails, threatening to disclose the company’s payroll data, claiming it showed significant pay inequity across the workforce. In those emails, Curry framed the data theft extortion attack as an effort to implement salary transparency.
Officials said Curry included attachments with the emails containing screenshots of spreadsheets listing the personally identifiable information of company employees. He also warned the company he would provide employees instructions on how to address pay discrimination through mediation, the Equal Employment Opportunity Commission or a class-action lawsuit.