Loading story…
A Tennessee man, Nicholas Moore (24), pleaded guilty to repeatedly accessing the U.S. Supreme Court’s restricted electronic filing system using stolen credentials, and to compromising accounts tied to AmeriCorps and the Department of Veterans Affairs (VA). Prosecutors said Moore accessed the Supreme Court system at least 25 times between August and October 2023, sometimes logging in multiple times per day with the same compromised credentials, and used the Instagram handle @ihackedthegovernment to post screenshots and details from victims’ accounts.
Court filings and DOJ statements indicate Moore also used compromised MyAmeriCorps credentials to access a victim’s account multiple times and obtain personal data, and used stolen credentials to access a veteran’s VA My HealtheVet portal and expose private health information. Reporting notes the charge was a computer fraud-related misdemeanor, with potential penalties including up to one year in prison and a fine (reported as up to $100,000), with sentencing scheduled for April 2026.
See the actors and campaigns active against you right now.
5 events from the most recent confirmed update back to the earliest known activity.
At his April 17, 2026 sentencing, Nicholas Moore received one year of probation for unlawfully accessing the U.S. Supreme Court filing system and other government-linked accounts using stolen credentials. Prosecutors sought probation rather than prison, and Moore apologized during the hearing.
Following his guilty plea, Moore's sentencing was set for April 17, 2026, before U.S. District Judge Beryl A. Howell. He faces up to one year in prison and a fine of up to $100,000.
Moore pleaded guilty in U.S. District Court to a one-count information for fraud activity in connection with computers after admitting to hacking Supreme Court, AmeriCorps, and VA-linked systems. The Justice Department said the charge carries a maximum penalty of one year in prison and a $100,000 fine.
Between 2023-09-14 and 2023-10-14, Moore used stolen credentials from a U.S. Marine Corps veteran to access the VA's My HealtheVet portal multiple times. He stole private health information from the account and posted it publicly online.
Between August and October 2023, Nicholas Moore used stolen credentials to access the U.S. Supreme Court's restricted electronic filing system at least 25 times and a victim's MyAmeriCorps account multiple times. Prosecutors said he viewed and exfiltrated sensitive personal data and later exposed some of it online.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
6 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcetechcrunch.com
Open sourcescworld.com
Open sourcecybersecuritynews.com
Open sourcebleepingcomputer.com
Open sourcesecurityaffairs.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Federal prosecutors say **Nicholas Moore**, a 24-year-old from Springfield, Tennessee, is expected to plead guilty to a **misdemeanor** charge tied to hacking the **U.S. Supreme Court’s electronic case/document filing system**. Court documents allege Moore “intentionally accessed a computer without authorization” on **25 different days** between **August and October 2023**, and obtained information from a protected computer; authorities have not publicly detailed what data was accessed or the method used. Moore is scheduled to appear and enter the plea **via video** in U.S. District Court for the District of Columbia. The case is being reported amid broader concerns about compromises of U.S. judiciary electronic filing platforms. The Administrative Office of the U.S. Courts has said it **strengthened protections** for sensitive case documents following escalated cyberattacks against its case management/records systems, and reporting has linked at least one major breach of federal court records infrastructure to **Russian government-backed hackers**. Prior defensive measures have included requiring certain sensitive filings to be submitted on paper to reduce exposure from electronic filing system intrusions.
Jun 29, 2026
Federal prosecutors in Maryland indicted former hospital pharmacist Matthew Bathula over an alleged eight-year campaign of unauthorized computer access tied to a Maryland medical system, identified in court records as **Company A** and reported to be the University of Maryland Medical Center. Investigators allege Bathula abused his role as a pharmacy clinical specialist from July 2016 through September 2024 to steal usernames, passwords, authentication cookies, images, videos, and other sensitive data from nearly 200 victims connected to the health system. According to the indictment, Bathula used keyloggers, cookie theft tools, mailbox rules, file masquerading, and later spyware to maintain covert access to employee and affiliate accounts, including **Gmail**, **Microsoft 365**, **Google Photos**, **iCloud Photos**, social media, dating apps, and home security systems. Prosecutors say the activity enabled prolonged surveillance and, between February 2023 and July 2024, included covert video recording of victims without consent; the FBI said it identified and notified 195 victims nationwide within four months. Bathula faces two counts of unauthorized access to a protected computer and one count of aggravated identity theft, with potential prison exposure of up to 17 years, while civil lawsuits by current and former employees allege negligence, negligent supervision, negligent security, and invasion of privacy.
Jun 29, 2026
Former U.S. Army soldier Cameron John Wagenius, known online as `kiberphant0m` and `cyb3rph4nt0m`, was sentenced to 70 months in prison for hacking and extorting at least 10 U.S. technology and telecommunications companies from April 2023 through December 2024. He pleaded guilty to wire-fraud conspiracy, computer-fraud-related extortion, aggravated identity theft, and unlawful transfers of confidential phone records, and was ordered to pay **$294,978** in restitution. Wagenius and co-conspirators used stolen network credentials—including credentials obtained through the SSH Brute tool he helped develop—to access victim systems, steal data, demand ransoms, and sell stolen information through Telegram, BreachForums, and XSS.is. Prosecutors said the group sought at least $1 million and used compromised records in SIM-swapping fraud; the activity was also linked to the 2024 Snowflake customer-data theft and extortion campaign, which affected more than 165 organizations, including AT&T.
Sep 28, 2026