Man Charged with Threatening to Publicize Hacked Data of NJ Company

The suspect demanded over $3 million in Bitcoin from a New Jersey company’s Brazilian subsidiary.

NEWARK, NJ – Federal authorities have indicted a Brazilian citizen on charges of making extortionate threats to expose stolen data from the Brazilian subsidiary of a New Jersey company, U.S. Attorney Philip R. Sellinger announced. The defendant, 29-year-old Junior Barros De Oliveira of Curitiba, Brazil, is accused of threatening to release confidential customer data unless a multimillion-dollar Bitcoin ransom was paid.

According to an indictment unsealed in Newark federal court, “In March 2020, De Oliveira gained unauthorized access and exceeded authorized access to the computer systems of Victim 1-Brazil, the Brazilian subsidiary of a New Jersey company. Exploiting this access, De Oliveira obtained confidential customer information relating to approximately 300,000 customers of Victim 1-Brazil. In September 2020, De Oliveira began contacting U.S. representatives of Victim 1, including its CEO, in an attempt to extort money from Victim 1-Brazil. De Oliveira demanded over approximately $3,000,000 in Bitcoin in exchange for keeping the stolen data confidential and not publicizing it.”

Charges and Potential Penalties

De Oliveira faces:

• Four counts of making extortionate threats involving information obtained from protected computers
  • Each charge carries a maximum prison term of five years, and a maximum fine of $250,000 or twice the value of any gain or loss.
• Four counts of threatening communications
  • Each charge carries a maximum prison term of two years, and a maximum fine of $250,000 or twice the value of any gain or loss.

Investigation and Prosecution

U.S. Attorney Sellinger credited special agents of the Federal Bureau of Investigation (‘FBI’)’s Newark Field Office, under the direction of Acting Special Agent in Charge Nelson I. Delgado. The government is represented by Assistant U.S. Attorney David E. Malagold of the Cybercrime Unit in Newark.

Local cybersecurity experts caution New Jersey businesses—particularly those with international branches—to remain vigilant against threats of hacking and extortion. Authorities emphasize the seriousness of such incidents in an increasingly interconnected global marketplace.

As with all criminal cases, “The charges and allegations contained in the indictment are merely accusations, and the defendant is presumed innocent unless and until proven guilty.” The investigation remains ongoing, and no further court dates have been announced at this time.