Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies
A former U.S. Army soldier was sentenced to 70 months for extortion attacks on AT&T and Snowflake customers.
Cameron John Wagenius, 22, was sentenced to 70 months in prison and ordered to pay almost $295,000 in restitution after pleading guilty in July 2025. While on active duty, he and co-conspirators Connor Moucka and John Erin Binns stole credentials, broke into Snowflake customer environments, and attempted to extort organizations including AT&T, Ticketmaster, Advance Auto Parts, and Santander. Prosecutors said the group stole billions of records from more than 165 Snowflake customers and received over $2.5 million in extortion payments combined. Wagenius, known as kiberphant0m, used a tool called SSH Brute and leaked stolen call records tied to Donald Trump in failed attempts to extort $500,000 from AT&T.