Romanian Hacker Pleads Guilty to Selling Unauthorized Access to Oregon State Government Network

A Romanian national has admitted to hacking into an Oregon state government network and selling the stolen access online, marking another win for U.S. authorities in combating international cybercrime.

Catalin Dragomir, 45, from Constanta, Romania, pleaded guilty yesterday in federal court to charges stemming from a 2021 intrusion into an Oregon state government office.

Court documents reveal that

in June 2021, Dragomir gained unauthorized access to a computer on the office’s network.

He then advertised and sold this access to buyers on dark web marketplaces. To prove the access’s value, Dragomir shared samples of personal identifying information (PII) extracted from the compromised system, including details that could enable further identity theft or fraud.

Dragomir’s scheme extended beyond Oregon. He repeatedly sold access to networks belonging to numerous other U.S. victims, inflicting at least $250,000 in losses through disrupted operations, data exposure, and recovery costs.

These attacks highlight the risks of initial access brokers, cybercriminals who breach networks and monetize entry points for ransomware gangs or other threat actors.

Law enforcement acted decisively. Romanian authorities arrested Dragomir in November 2024, followed by his extradition to the United States in January 2025.

He faces one count of obtaining information from a protected computer under the Computer Fraud and Abuse Act (CFAA), carrying a maximum five-year prison term, plus a mandatory two-year consecutive sentence for aggravated identity theft.

Sentencing is set for May 26, 2026, where a federal judge will apply U.S. Sentencing Guidelines, considering factors like victim impact and Dragomir’s role.

The FBI’s Portland Field Office led the investigation, with prosecution handled by Trial Attorneys Benjamin A.

Bleiberg and Alison M. Zitron from the DOJ’s Computer Crime and Intellectual Property Section (CCIPS), alongside Assistant U.S. Attorney Katherine A. Rykken for the District of Oregon.

International cooperation was key: CCIPS’s Office of International Affairs partnered with Romania’s Ministry of Justice and judiciary. Private sector firm Darkweb IQ provided crucial intelligence on Dragomir’s activities.

This case underscores CCIPS’s aggressive stance on cyber threats. Since 2020, the section has convicted over 180 cybercriminals and recovered more than $350 million in victim funds, often blending public-private efforts.

For state and local governments, the incident serves as a reminder to prioritize network segmentation, multi-factor authentication, and intrusion detection.

As initial access sales fuel broader attacks, vigilance against dark web marketplaces remains essential.

Follow us on Google News, LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google

The post Romanian Hacker Pleads Guilty to Selling Unauthorized Access to Oregon State Government Network appeared first on Cyber Security News.