Engineer Sentenced to Prison for Insider Cyber Extortion Plot
A former New Jersey infrastructure engineer has been sentenced to 32 months in federal prison following an insider sabotage and extortion plot against his former employer.
Radwan AbdulhadiEditor and technology writer
Overview of the Insider Cyber Attack
A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company, as the Department of Justice [announced](https://www.justice.gov/usao-nj/pr/former-employee-industrial-company-sentenced-32-months-prison-computer-attack-and). Fifty-nine-year-old Daniel Rhyne had previously pleaded guilty to extortion in relation to a threat to cause damage to a protected computer and intentional damage to a protected computer.
Prior to the incident, Rhyne served as a core infrastructure engineer at an industrial firm headquartered in Somerset County, New Jersey. The industrial firm provides services to a wide range of critical sectors, including aquaculture, biopharmaceuticals, chemistry, electronics, food and beverage, healthcare, hydrogen mobility, manufacturing and industrial processing, metals, oil and gas, and pulp and paper.
Execution of the Network Sabotage
In November 2023, Rhyne executed his plan by placing scheduled tasks on the industrial firm’s domain controller. These automated tasks were designed to delete 13 domain administrator accounts, change passwords to 301 domain user accounts, alter passwords to two local administrator accounts impacting 254 servers, and modify passwords to two local administrator accounts affecting 3,284 workstations.
The operational impact of these changes effectively denied the firm access to its systems and critical data. Where passwords were altered during the routine execution of the scheduled tasks, they were typically changed to 'TheFr0zenCrew!'. The scheduled tasks completed their actions late in the afternoon on November 25.
Extortion Demands and Ransom Threats
Within an hour of the network changes completing, certain employees at the firm received an email originating from an external address. The email featured the subject line 'Your Network Has Been Penetrated' and warned that network administrators had been locked out or deleted entirely.
The message further claimed that all backups had been deleted and stated that 40 random servers would be shut down each day over a ten-day period unless a ransom payment was fulfilled. Rhyne's extortion demand called for a payment of 20 bitcoin, which was worth approximately $750,000 at the time of the incident.
Investigation and Law Enforcement Response
There is no indication that the victim firm ever paid the demanded ransom. Instead, the company immediately initiated its own internal forensic analysis to investigate network anomalies, correlating internal digital logs with physical access records.
The firm involved the Federal Bureau of Investigation (FBI), which tracked the unauthorized digital activity directly to Rhyne’s residential IP address located in Warren County, New Jersey. This collaborative forensic investigation yielded sufficient evidence for FBI Special Agent Timothy Lee to file a criminal complaint on August 8, 2024.
Legal Proceedings and Sentencing
The criminal complaint led directly to Rhyne’s arrest on August 27, 2024, in Kansas City, where he had relocated following the incident. Detailed coverage of the case and similar cybercrime legal actions can be found on [SecurityWeek](https://www.securityweek.com/insider-cyber-extortion-plot-industrial-firm-lands-engineer-in-prison/).
Rhyne formally entered a guilty plea on April 1, 2026, in federal court in Trenton, New Jersey, before District Judge Michael A. Shipp. Following the guilty plea, he was sentenced on September 28, 2026, to serve 32 months in federal prison for his involvement in the network sabotage and extortion plot.
Sources
- SecurityWeekInsider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
Continue chronologically
Related stories
OpenAI Engineer Arrested for Planting Hidden Office Recording Device
An OpenAI engineer has been arrested and charged by the U.S. Department of Justice for allegedly hiding a recording device in a company conference room.
Syrian Hacker Sentenced in US After Over a Decade on the Run
Ahmad Umar Agha, a member of the Syrian Electronic Army, has been sentenced to 42 months in US prison following a decade on the run for cyberattacks.
FortiBleed Campaign Locks Victims Out of Fortinet Devices
The ongoing FortiBleed campaign has compromised tens of thousands of Fortinet devices globally, with attackers locking organizations out completely.
US Arrests Tech CEO Over $300M Nvidia Chip Smuggling Scheme
Federal authorities have arrested California tech CEO Greg Lui for allegedly smuggling over $300 million in restricted Nvidia chips to China.
