{"id":79225,"date":"2026-10-08T08:14:09","date_gmt":"2026-10-08T08:14:09","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/engineer-who-sabotaged-employer-for-bitcoin-ransom-gets-prison-time\/"},"modified":"2026-10-08T08:14:09","modified_gmt":"2026-10-08T08:14:09","slug":"engineer-who-sabotaged-employer-for-bitcoin-ransom-gets-prison-time","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/engineer-who-sabotaged-employer-for-bitcoin-ransom-gets-prison-time\/","title":{"rendered":"Engineer Who Sabotaged Employer for Bitcoin Ransom Gets Prison Time"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Daniel Rhyne was sentenced to 32 months in prison for sabotaging his former employer\u2019s computer systems and attempting to extort the company.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Prosecutors said he deleted administrator accounts, changed passwords, and shut down servers using his privileged access.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Rhyne demanded about 20 bitcoin, worth roughly $750,000 at the time, in exchange for stopping the attack.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p>Daniel Rhyne, 59, of Kansas City, Missouri, was sentenced Sept. 28 in federal court in Trenton after previously pleading guilty to extortion involving a threat to damage a protected computer and intentionally damaging a protected computer, <a href=\"https:\/\/www.justice.gov\/usao-nj\/pr\/former-employee-industrial-company-sentenced-32-months-prison-computer-attack-and\" target=\"_blank\" rel=\"noopener noreferrer\">according to<\/a> the U.S. Attorney\u2019s Office for the District of New Jersey.<\/p>\n<p>Rhyne worked as a core infrastructure engineer for the unidentified industrial company, giving him administrative privileges over its computer systems. An FBI criminal complaint filed in 2024 describes a methodical effort to exploit that access. Investigators said Rhyne created a hidden virtual machine on the company network\u2014protected by the password \u201cTheFr0zenCrew!\u201d\u2014and used it to remotely access an administrator account.<\/p>\n<p>On Nov. 25, 2023, prosecutors said, Rhyne scheduled a series of automated tasks designed to execute later that day. The commands would delete 13 domain administrator accounts, change the passwords of 301 user accounts, alter local administrator passwords affecting 254 servers, and change credentials tied to more than 3,200 employee workstations.<\/p>\n<p>Other scheduled tasks would shut down company servers and computers. Investigators said the combined actions were designed to deny the company access to its own systems and data.<\/p>\n<h2>Evidence Pointed to an Internal Threat<\/h2>\n<p>The complaint detailed signs of preparation. Days before the attack, searches conducted from the hidden virtual machine included queries such as how to change administrator passwords from a command line, delete a domain account, and remotely shut down a computer. Similar searches were found on Rhyne\u2019s company laptop, investigators said.<\/p>\n<p>At about 4 p.m. on Nov. 25, network administrators discovered that their accounts had been deleted. Roughly 44 minutes later, employees received an <a href=\"https:\/\/news.bitcoin.com\/ransomware-hacker-pleads-guilty-after-15m-bitcoin-extortion-scheme\/\">extortion email<\/a> claiming that all IT administrator accounts had been deleted and backups erased. The sender threatened to shut down an additional 40 servers each day for 10 days unless the company paid approximately 20 bitcoin by Dec. 2\u2014then worth about $750,000, and currently valued <a href=\"https:\/\/news.bitcoin.com\/market-updates\/bitcoin-price-erases-october-gains-why-81300-critical-level\/\">near $1.67 million<\/a>.<\/p>\n<p>Investigators ultimately linked the hidden virtual machine to Rhyne\u2019s account and company laptop. They also found that the password protecting the extortion email address was \u201cTheFr0zenCrew!\u201d\u2014the same password used for the hidden virtual machine.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden md:flex md:flex-row md:gap-3 lg:hidden\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/bitcoin-price-erases-october-gains-why-81300-critical-level\/\"><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/div>\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden lg:flex lg:flex-row lg:gap-4\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/bitcoin-price-erases-october-gains-why-81300-critical-level\/\"><img alt=\"Bitcoin Price Erases October Gains: Why $81,300 Is Now the Critical Level\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbitcoin-price-oct7-2026-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/p>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">Bitcoin price dropped to an intraday low of $82,734, erasing early-month gains. Despite forced long liquidations, open interest remained steady,\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/regulation-and-legal\/engineer-sabotaged-employer-bitcoin-ransom-prison-time\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Daniel Rhyne was sentenced to 32 months in prison for sabotaging his former employer\u2019s computer systems and attempting to extort the company. Prosecutors said he deleted administrator accounts, changed passwords, and shut down servers using his privileged access. Rhyne demanded about 20 bitcoin, worth roughly $750,000 [&hellip;]<\/p>\n","protected":false},"author":3947362408,"featured_media":79226,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79225"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/3947362408"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=79225"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/79226"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=79225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=79225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=79225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}