Year: 2015
Court filings and enforcement actions initiated or unsealed during calendar year 2015.
Key Facts
- 5 major cases opened or unsealed in 2015.
- Cumulative losses identified for 2015 matters exceed $219.0 million.
- Documented from federal indictments and official government disclosures.
Documented Matters for 2015
U.S. v. Andrei Tyurin (JPMorgan Chase Data Breach)
Russian hacker who penetrated JPMorgan Chase and eleven other major U.S. financial institutions and media companies, stealing personal data belonging to over 100 million customers to fuel securities pump-and-dump schemes.
U.S. v. Fujie Wang et al. (Anthem 78.8M Patient Record Breach)
Chinese state-affiliated threat actors conducted spearphishing campaigns against Anthem health insurance subsidiaries, deploying customized backdoors to penetrate enterprise data warehouses and exfiltrate 78.8 million personal health and identity records.
Ukraine Electrical Substation Cyber Warfare Blackout
First confirmed cyberattack to deliberately cause an electrical power grid blackout. Russian military GRU hackers infiltrated power distribution companies, hijacked SCADA human-machine interfaces (HMI), opened circuit breakers at 30 substations, and destroyed control systems with KillDisk.
United States ex rel. Markus v. Aerojet Rocketdyne (Civil Cyber-Fraud Settlement)
Landmark Department of Justice Civil Cyber-Fraud Initiative settlement under the False Claims Act where defense contractor Aerojet Rocketdyne paid $9 million to resolve a qui tam whistleblower lawsuit alleging it falsely certified compliance with federal cybersecurity regulations (DFARS 252.204-7012 and NIST SP 800-171) on Department of Defense and NASA missile contracts.
U.S. v. Maxim Senakh (Ebury Linux SSH Rootkit & Botnet)
Russian national arrested in Finland, extradited to the United States, and sentenced to 46 months imprisonment in federal court for operating the Ebury botnet, which infected over 25,000 Linux enterprise web servers with a stealth OpenSSH backdoor to harvest system credentials and divert web traffic.