NewsPublished 23 Feb 2026

Romanian Hacker Pleads Guilty to Selling Access to US State Network

Source SecurityWeek

Description

Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network. The post Romanian Hacker Pleads Guilty to Selling Access to US State Network appeared first on SecurityWeek .

Impact

The compromise and subsequent sale of access to a US state government network can have significant consequences. Confidential government data could be exposed or manipulated, undermining public trust and national security. Integrity of critical systems may be compromised, potentially affecting government operations and citizen services. Although no direct evidence of data breach or disruption is provided, the availability of network access to unauthorized parties increases the risk of further malicious activities, including espionage, ransomware attacks, or sabotage. The incident also damages the reputation of the affected government entity and may lead to increased regulatory scrutiny and financial costs related to incident response and remediation. Other organizations with similar network architectures or security postures may be at risk if similar access-selling schemes are employed by threat actors.

Defensive guidance

Organizations, especially government entities, should implement multi-factor authentication (MFA) for all remote and privileged access to reduce the risk of unauthorized entry. Continuous monitoring and anomaly detection systems should be deployed to identify unusual access patterns or lateral movement within networks. Network segmentation can limit the scope of access even if credentials are compromised. Insider threat programs must be strengthened to detect and deter malicious insiders or compromised accounts. Regular audits of access permissions and timely revocation of unnecessary privileges are critical. Employing threat intelligence sharing with other government agencies can help identify emerging tactics used by attackers selling access. Incident response plans should be updated to address scenarios involving unauthorized access sales and subsequent exploitation. Finally, user training on phishing and social engineering can reduce the likelihood of initial compromise.

References

securityweek.com/romanian-hacker-pleads-guilty-to-selling-access-to-us-state-network/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Feb 2026, 12:02 UTC

References

Community reviews