Security News > 2020 > June > Feds cuff Detroit man for allegedly hacking University of Pittsburgh Medical Center

US federal authorities said they had arrested Justin Sean Johnson in Detroit, Michigan, on charges associated with the 2014 hacking of a human resources database at the University of Pittsburgh Medical Center and thrown the book at him.

In a 43-count indictment returned last month and just unsealed [PDF], Johnson is charged with multiple counts of conspiracy, wire fraud, and aggravated identity theft for his alleged role in the theft of personal information associated with 65,000 employees from the medical center's PeopleSoft system.

Brady said Johnson sold the personal data he obtained on dark web markets between 2014 and 2017.

In November 2018, the Pennsylvania Supreme Court issued an opinion to the contrary, finding that employers do have a duty to safeguard employee data.

The Pennsylvania Supreme Court's effort to hold businesses accountable for their data handling could be undone if weaker federal rules get passed.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/06/19/feds_arrest_detroit_man_believed/