A 20-year-old U.S. Army soldier, identified as Cameron John Wagenius, has been arrested and indicted on suspicion of being the cybercriminal "Kiberphant0m". He is accused of stealing and selling sensitive customer call records from AT&T and Verizon. Wagenius, who was previously stationed in South Korea as a communications specialist, allegedly used his access to systems to exfiltrate data and extort the telecommunications companies. The arrest follows an investigation which linked Kiberphant0m to stolen data from AT&T and Verizon.
Wagenius's mother, Alicia Roen, revealed that prior to his arrest, her son admitted being associated with another cybercriminal named Connor Riley Moucka, also known as "Judische". Moucka was arrested in late October for stealing data from the cloud service Snowflake and extorting companies. Moucka allegedly outsourced the sale of the stolen data to others, including Kiberphant0m. Kiberphant0m himself claimed responsibility for hacking into at least 15 telecommunications firms, including AT&T and Verizon and even posted what they claimed were the call logs for President-elect Donald J. Trump and Vice President Kamala Harris.