U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions

* Cameron John Wagenius pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024.
* Wagenius adopted the cybercriminal persona “Kiberphant0m” while stationed at a U.S. Army base in South Korea.
* The data theft involved downloading credentials from Snowflake that lacked multi-factor authentication.
* Kiberphant0m bragged about stealing call and text metadata for tens of millions of AT&T customers in October 2024.
* Kiberphant0m claimed to have hacked into several telecommunications companies worldwide, including Verizon’s Push-to-Talk business, and extorted them.
* Kenneth Schuchman pleaded guilty in 2019 to operating the Satori botnet.
* Conor Riley Moucka was arrested in 2024 and pleaded guilty in August 2026.
* John Erin Binns is wanted for a 2021 data breach at T-Mobile exposing personal information of at least 76 million customers.
* Wagenius allegedly sought to re-extort victims and threatened to disclose national security secrets, including AT&T call logs and alleged NSA schematics.
* Wagenius was sentenced to 70 months in federal prison and ordered to pay $294,978 in restitution.
* Wagenius reportedly used inmate email systems to request information about Windows 10 Enterprise privilege escalation and specific CVEs related to D-Link devices and radio antenna construction while incarcerated.

The narrative juxtaposes massive digital crime—the large-scale theft and extortion of telecom data—with a seemingly incongruous focus on insider threat reconnaissance within a military correctional system. This raises questions about the convergence of external criminal activity and internal security exposure. The fact that the extortion efforts yielded minimal financial success ($1,500) contrasts sharply with the scale of the data compromised, suggesting motivations beyond pure profit might be involved, perhaps related to the threats of national security disclosure. The transition from high-profile data theft to explicit attempts to exploit vulnerabilities within a correctional facility suggests a complex interplay between criminal exploitation and institutional weakness. Furthermore, the admission that Wagenius attempted to use AI prompting techniques to research specific vulnerabilities (CVEs) demonstrates an internalization of technical knowledge that was then weaponized, regardless of his success in exploiting the targets themselves. This points toward a systemic problem where specialized knowledge, once acquired through illicit means, is reapplied against systems, whether commercial or governmental.
Bridge Questions: How does the compartmentalization of information within military and prison systems influence an individual's ability to recognize and exploit these vulnerabilities? What are the long-term implications for trust in institutional security when external actors possess intimate knowledge of system weaknesses? If criminal motivation is minimized by poor financial outcomes, what drives the continued engagement with activities that pose risks to broader public safety or institutional integrity?