Dark
Light
April 27, 2024
March 21, 2024

Hacker caught stealing personal information from more than 132K people pleads guilty in federal court

The following was taken from a press release distributed by the United States Attorney’s Office – Northern District of Georgia on March 19, 2024:

COWETA COUNTY, Ga. – Robert Purbeck, also known as “Lifelock,” and “Studmaster,” who hacked into the computer servers of the City of Newnan and a Griffin medical clinic, and then targeted at least 17 other victims across the United States – in the process stealing personal information of more than 132,000 individuals – has pleaded guilty today to federal charges of computer fraud and abuse. 

“Purbeck breached computer systems in our district and across the country, stole vast amounts of personal information, and aggravated his crimes by weaponizing sensitive data in an egregious attempt to extort his victims,” said U.S. Attorney Ryan K. Buchanan. “Cyber-attacks on health care facilities and local governments pose a grave risk to the security of personal information.  Our office is committed to tirelessly coordinating with our law enforcement partners to help safeguard the sensitive information of citizens by combatting cybercrime threats from within and outside this district.”

“FBI Atlanta continues to be unrelenting in bringing cybercriminals to justice and determined to defeat and disrupt campaigns targeting critical infrastructure,” said FBI Atlanta Special Agent in Charge Keri Farley. “Helping victims of crime is the FBI’s highest priority. The FBI will continue to aggressively pursue these criminal actors wherever they attempt to hide and ensure they are held accountable under the law.”

According to U.S. Attorney Buchanan, the charges, and other information presented in court: in June 2017, Purbeck purchased access to the computer server of a Griffin, Georgia medical clinic on a darknet marketplace.  He then used the stolen credentials to gain unauthorized access into computers of the medical clinic and stole medical records and other documents, which contained sensitive personal information of over 43,000 individuals, including names, addresses, birthdates, and social security numbers.  

Subsequently, in February 2018, Purbeck purchased access to a City of Newnan, Georgia Police Department server on a darknet marketplace.  Purbeck then used these stolen credentials to hack into the city’s computer systems and steal records consisting of police reports and documents, which included personal information of more than 14,000 people. 

On August 31, 2019, as part of an FBI investigation, agents executed a federal search warrant on Purbeck’s home in Meridian, Idaho.  During the search, the FBI seized multiple computers and devices, which contained personal information of over 132,000 individuals obtained through numerous data breaches, including the City of Newnan, the Griffin medical clinic, and at least 17 other victims throughout the United States.  As part of his plea agreement, Purbeck agreed to pay more than $1 million in restitution to these victims. 

Sentencing for Purbeck, 44, of Meridian, Idaho, is scheduled for June 18, 2024, 2024, at 10:30 am before Chief U.S. District Judge Timothy C. Batten Sr. in the United States Courthouse in Newnan, Georgia.

This case is being investigated by the FBI Atlanta Field Office, with valuable assistance provided by the FBI Boise, Idaho Resident Agency.

Assistant U.S. Attorneys Michael Herskowitz, Nathan Kitchens, Alex Sistla, and Nicholas Evert, and Trial Attorney Brian Mund of the U.S. Department of Justice Computer Crime and Intellectual Property Section are prosecuting the case.  The U.S. Attorney’s Office for the District of Idaho has also provided valuable assistance in this case.

For further information please contact the U.S. Attorney’s Public Affairs Office at USAGAN.PressEmails@usdoj.gov or (404) 581-6280.  The Internet address for the U.S. Attorney’s Office for the Northern District of Georgia is http://www.justice.gov/usao-ndga.