Romanian Hacker Pleads Guilty to Selling Oregon Government Network Access on Dark Web A 45-year-old Romanian national, Catalin Dragomir, has pleaded guilty to hacking into an Oregon state government network in June 2021 and selling the stolen access on dark web marketplaces. Dragomir, from Constanta, Romania, admitted to breaching a protected computer and extracting personal identifying information (PII) to demonstrate the value of the compromised system to potential buyers. The scheme extended beyond Oregon, with Dragomir selling access to multiple U.S. victim networks, resulting in at least $250,000 in damages from operational disruptions, data exposure, and recovery costs. His actions exemplify the growing threat of initial access brokers cybercriminals who infiltrate networks and monetize entry points for ransomware groups or other malicious actors. Dragomir was arrested by Romanian authorities in November 2024 and extradited to the U.S. in January 2025. He faces charges under the Computer Fraud and Abuse Act (CFAA), including a potential five-year prison term, plus a mandatory two-year consecutive sentence for aggravated identity theft. Sentencing is scheduled for May 26, 2026. The investigation was led by the FBI’s Portland Field Office, with prosecution handled by the DOJ’s Computer Crime and Intellectual Property Section (CCIPS) and the U.S. Attorney’s Office for the District of Oregon. International collaboration with Romania’s Ministry of Justice and private sector intelligence from Darkweb IQ played a critical role in the case. Since 2020, CCIPS has convicted over 180 cybercriminals and recovered more than $350 million in victim funds, often leveraging public-private partnerships. The incident highlights vulnerabilities in state and local government networks, emphasizing the need for stronger security measures against dark web-facilitated cyber threats.