This threat involves a criminal actor who gained unauthorized access to a protected computer network belonging to an Oregon state government office and sold that access to others. The actor, Catalin Dragomir, admitted to hacking the network in June 2021 and selling access for Bitcoin. He also compromised at least 10 other organizations' networks. The US Justice Department reported losses exceeding $250,000 due to these activities. Dragomir was arrested, extradited, pleaded guilty to charges including obtaining information from a protected computer and aggravated identity theft, and sentenced to prison. This case is a law enforcement and legal outcome rather than a technical vulnerability or exploit.

The unauthorized access and resale of government network access resulted in financial losses exceeding $250,000. The compromised networks included at least one Oregon state government office and at least 10 other organizations. The incident demonstrates risks related to network security breaches and the potential for financial and operational harm to public sector entities. There is no indication of ongoing exploitation or technical vulnerability details in the data provided.

This case is a closed criminal incident with a legal resolution. No specific technical patch or remediation applies. Organizations should ensure robust network security controls to prevent unauthorized access and monitor for suspicious activity. Since this is a law enforcement matter, no direct mitigation steps are provided by the vendor or authorities in the advisory. Patch status is not applicable.