Insider Extortion Scheme Results in $2.5M Ransom Payment

• •Cameron Curry extorted $2.5 million after accessing sensitive corporate data.
• •The attack involved over 60 threatening emails to company executives and employees.
• •Curry's operational security mistakes facilitated his identification by authorities.

Cameron Nicholas Curry, a 27-year-old data analyst contractor from North Carolina, was convicted of extorting $2.5 million from a Washington, D.C.-based technology company. The extortion scheme began after Curry learned his contract would be terminated. He accessed sensitive corporate data, including employee compensation information, and sent over 60 threatening emails to executives and employees demanding ransom. Curry framed his actions as promoting salary transparency while threatening to leak sensitive payroll data. The company reported the breach to the FBI on December 14, 2023, and paid the ransom in January 2024. Curry's operational security mistakes, such as using family members' debit cards, led to his quick identification and arrest. He faces up to two years in prison for each of the six extortion counts.