Man Sentenced To 7 Years For Hacking Health Care Employees

Justin Sean Johnson was sentenced to seven years in prison for hacking the University of Pittsburgh Medical Center (UPMC) health care provider and insurer in 2014, stealing the personal information and W-2 information, including names, social security numbers, addresses and salary information of more than 65,000 employees, and then selling it on the dark web.

While Johnson, also known as TheDearthStar and Dearthy Star, was indicted in 2020 on 43 counts of conspiracy, wire fraud and aggravated identity theft, he pleaded guilty to stealing and selling the PII and W2 information of tens of thousands of UPMC employees before he was convicted.

While Johnson infiltrated UPMC’s network in early December 2013 after hacking its Oracle PeopleSoft human resources management system, he infiltrated the company’s servers daily between January 21 and February 14, 2014, to steal the PII of tens of thousands of UPMC employees.

The stolen UPMC employees PII, which Johnson sold to attackers on the dark web in 2014, were used to file hundreds of false tax returns and claims for about $1.7 million, which were later converted into Amazon gift cards.

IT World Canada Staff
IT World Canada Staff
The online resource for Canadian Information Technology professionals.

Would you recommend this article?


Thanks for taking the time to let us know what you think of this article!
We'd love to hear your opinion about this or any other story you read in our publication.

Jim Love, Chief Content Officer, IT World Canada

Featured Download

ITW in your inbox

Our experienced team of journalists and bloggers bring you engaging in-depth interviews, videos and content targeted to IT professionals and line-of-business executives.

More Best of The Web