A Massachusetts man pleaded guilty today to hacking into computer networks around the country – including networks belonging to law enforcement agencies, a local police department and a local college – to obtain highly sensitive law enforcement data and alter academic records. He also pleaded guilty to obtaining stolen credit, debit and payment card numbers.
Assistant Attorney General Leslie R. Caldwell of the Justice Department’s Criminal Division, United States Attorney Carmen M. Ortiz of the District of Massachusetts, Special Agent in Charge Vincent Lisi of the FBI’s Boston Division and Colonel Timothy P. Alben of the Massachusetts State Police made the announcement.
On June 2, 2014, Cameron Lacroix, 25, of New Bedford, Massachusetts, was charged by a criminal information with two counts of computer intrusion and one count of access device fraud. Lacroix entered his guilty plea today before U.S. District Court Judge Mark Wolf of the District of Massachusetts. He pleaded guilty to both counts in the information and agreed to serve a four-year prison sentence.
According to the plea agreement, b etween May 2011 and May 2013, Lacroix obtained and possessed payment card data for more than 14,000 unique account holders. For some of these account holders, Lacroix also obtained other personally identifiable information, including the account holders’ full names, addresses, dates of birth, social security numbers, email addresses, bank account and routing numbers and lists of merchandise the account holders had ordered.
Lacroix also admitted to hacking into a computer server operated by a local Massachusetts police department in September 2012, and then accessing an e-mail account belonging to its chief of police. Additionally, Lacroix admitted to repeatedly hacking into law enforcement computer servers containing sensitive information including police reports, arrest warrants, and sex offender information, between August 2012 and November 2012. Lacroix also admitted to using stolen credentials to access and change information in the servers of Bristol Community College on multiple occasions between September 2012 and December 2013.
Judge Wolf set Lacroix’s sentencing for Oct. 27, 2014.
The case was investigated by the FBI Boston Division Cyber Task Force. The case is being prosecuted by Senior Trial Attorney Mona Sedky from the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Adam Bookbinder of the District of Massachusetts. The Department of Justice and the U.S. Attorney’s Office would like to thank Bristol Community College for its cooperation during this investigation.