Romanian Hacker Sentenced to Nearly Five Years for Oregon State Network Breach

PORTLAND, Ore. — A Romanian national was sentenced to nearly five years in federal prison Tuesday for selling unauthorized access to an Oregon state government computer network and committing aggravated identity theft.

Catalin Dragomir, 34, pleaded guilty to charges related to the cyberattacks that compromised sensitive government systems. U.S. District Judge James Redden imposed the 58-month sentence during a hearing at the U.S. Courthouse in Portland. The sentence includes a three-year term of supervised release following his incarceration.

Dragomir admitted to creating and selling access credentials to the Oregon Department of Transportation's internal network. The unauthorized access allowed buyers to view and manipulate data within the state system. Prosecutors stated the breach exposed personal information belonging to state employees and potentially affected public records.

The charges stem from a broader investigation into Dragomir's activities, which included multiple instances of aggravated identity theft. Court documents indicate Dragomir used stolen credentials to access financial accounts and other secure databases. The government alleged that Dragomir operated a network of compromised systems to facilitate the sale of access to other cybercriminals.

During the sentencing hearing, prosecutors emphasized the impact of the cyberattacks on state operations. The breach required significant resources to contain and remediate, disrupting normal government functions. Defense attorneys argued that Dragomir cooperated with authorities and provided information that assisted in the investigation.

Federal authorities have been increasing efforts to prosecute cybercriminals targeting government infrastructure. The case highlights the growing threat of foreign nationals exploiting vulnerabilities in state and local networks. Officials noted that the sale of unauthorized access to government systems poses a significant risk to national security and public trust.

Dragomir is expected to serve his sentence in a federal correctional facility. The Department of Justice has not specified which facility will house the defendant. Authorities are continuing to monitor related cyber activities and have urged state agencies to strengthen their cybersecurity measures.

The case remains under review as investigators assess the full extent of the damage caused by the breach. Questions remain regarding the identities of the buyers who purchased access to the Oregon network. Federal agents are working to trace the flow of funds and identify other individuals involved in the scheme.

State officials have announced plans to implement additional security protocols to prevent future breaches. The Oregon Department of Transportation is conducting a comprehensive review of its network defenses. The incident has prompted calls for increased federal funding to support cybersecurity initiatives at the state level.

As the legal proceedings conclude, the focus shifts to the long-term implications of the case. Cybersecurity experts warn that similar attacks may occur as criminals seek new targets. The sentencing serves as a warning to those who attempt to exploit government systems for financial gain.