Romanian Access Broker Sentenced in Oregon Network Intrusion

Cybercrime , Fraud Management & Cybercrime Romanian Access Broker Sentenced in Oregon Network Intrusion Hacker Amassed $250,000 in Losses Across Multiple US Entities Greg Sirico • May 28, 2026     Credit Eligible Get Permission Downtown Portland, Oregon. (Image: Sean Pavone/Shutterstock) The Romanian hacker who in 2021 sold on a hacking forum online credentials to the Oregon disaster management agency received a four year federal prison sentence. See Also: Why Cyberattackers Love 'Living Off the Land' Catalin Dragomir, 46, pleaded guilty in February to two criminal counts after being extradited from Romania in January 2025. He admitted obtaining information from a protected computer and committing aggravated identity theft. Both counts were linked to a 2021 data breach on the state's Department of Emergency Management. Operating online under the moniker "inthematrix1," Dragomir sold for $3,000 access to three servers and 50 desktops belonging to the state agency. Dragomir received Tuesday a federal sentence of four years and eight months in prison, putting an end to the access broker's "quite prolific" run, said Katherine A. Rykken, assistant U.S. attorney. Prosecutors estimate losses stemming from Dragomir's online activity exceed $250,000, linking his activity "at least 10 other victims located in the United States." The sentence is substantially more than the 24 months his attorneys argued Dragomir should receive. Their reasoning - and U.S. federal prosecutors' rebuttal - is under seal. The Oregonian reported that Dragomir said he had agreed to cooperate with investigators before he signed his February plea deal. Prosecutors indicted Dragomir on six criminal counts including multiple counts of money laundering. As part of his plea deal, Dragomir forfeited nearly 23 monero crypto coins, then worth roughly $7,400. With additional reporting by ISMG's David Perera in Northern Virginia.