Man Charged with Hacking California Business and Threatening Data Leak Pleads not Guilty

A man from Riverside County has received criminal charges for allegedly hacking into a computer network belonging to a Hesperia company. Authorities say he threatened to expose customer data on underground websites if the company did not pay him off.

Rusty James Estrella, 39, of San Jacinto, pleaded not guilty in court Monday to several charges, including computer fraud and attempted extortion. He also denied two aggravating allegations that could add to his sentence if convicted.

This case is an example of the growing threat that cyber extortion poses to small and medium-sized businesses. Many hackers are finding ways to break into company networks, they are also threatening to expose confidential data unless the victims pay them off.

How the Alleged Scheme Unfolded

Investigators say that Estrella entered the Hesperia business computer system illegally. Prosecutors say that once he accessed this system, he threatened to publish the private information of customers on dark web sites if the company did not pay him.

The dark web has become a place for criminals to leak stolen data. Hackers use this threat as a form of blackmail against their victims because companies generally lose their credibility and their customers’ trust if their data appears publicly.

There are no details in the court record about how Estrella entered the business’s computer system. Estrella is in custody at the West Valley Detention Center in Rancho Cucamonga, and he is due back in court on July 8.

Legal Consequences for Cyber Extortion

Individuals facing charges of the crime of computer fraud and attempted extortion will face substantial penalties in California. If convicted on computer fraud alone, defendants can expect lengthy sentences in prison.

The two special allegations of prior felony convictions add further weight to the case. If proven, these enhancements could increase Estrella’s sentence significantly.

The Office of the District Attorney in San Bernardino County has filed the case against Mr. Estrella. The prosecutors stated that the conduct poses a great risk to the integrity of the entire business community.

California prosecutors have been increasingly aggressive in pursuing cybercrime and fraud cases. Recently, 21 residents were charged in a $267 million Medi-Cal hospice fraud scheme that exploited vulnerabilities in the state’s healthcare system.

Protection Against Cyber Extortion Threats

Businesses can take action to lessen the risk of similar attacks; regular backup of company data allows firms to restore their systems when hackers encrypt the stored data on their systems. Installing security access control measures will limit access to confidential data.

Employee training will also help prevent an attack from succeeding because the majority of hackers access systems via phishing email and tricking an employee into revealing their password. If companies educate employees regarding the dangers of these types of phishing emails, this will help limit their exposure to these kinds of threats.

The arrest of an individual associated with cyber extortion indicates that law enforcement is serious about prosecuting these types of crimes.

The Growing Problem of Data Extortion Against Small Businesses

Data extortion has now become an increasing threat to small and medium-sized businesses; the recent incident and the arrest of Estrella exemplify the ongoing problem of data extortion. Criminals know even small businesses hold valuable customer and financial information.

The dark web gives hackers an effective platform for these threats. Once data appears on these underground sites, victims cannot easily remove it. California has over four million small businesses, many without dedicated IT security staff or cyber insurance.

The incident demonstrates how psychologically damaging an attack can be to a business. Even after refusing to pay a ransom, the company faced undue amounts of pressure as the businesses’ information could appear on the dark web. Customers may lose trust if their personal information surfaces on the dark web.

The San Bernardino County arrest demonstrates that law enforcement can identify and prosecute offenders. However, experts in the field of security emphasize that prevention is the best method to combat crime.

There are many things businesses can do to protect themselves from this type of cybersecurity threat. These include: installing a backup of your business’s data regularly; putting multi-factor authentication in place on business accounts; and educating your employees to be vigilant against computer attacks. Following these simple steps will stop many attacks before they even begin.