Former industrial company engineer charged over data extortion

What happened

A former infrastructure engineer was arrested in Missouri on 27 August 2024 over an alleged data extortion attempt against an industrial company headquartered in Somerset County, New Jersey, according to the US Department of Justice.

Daniel Rhyne, 57, of Kansas City, Missouri, was charged with computer-related extortion, intentional damage to a protected computer and wire fraud. He appeared in federal court in Kansas City and was released, the department said in its 28 August announcement.

Prosecutors allege that an email sent to some company employees on 25 November 2023 demanded 20 Bitcoin, worth about $750,000 at the time. It threatened further disruption unless the company paid.

The message claimed that the company’s IT administrators had been locked out of the network or had their accounts deleted, and that server backups had been erased. It also threatened to shut down more servers each day over a 10-day period.

These statements were claims made in the alleged extortion email. The announcement did not give a full account of the company’s actual losses, any payment or the extent of disruption to its operations.

The background

Rhyne had worked for the company as a core infrastructure engineer, a role concerned with the underlying systems supporting an organisation’s IT services. The Justice Department did not identify the business or say when his employment ended.

According to prosecutors, Rhyne remotely accessed a company administrator account without authorisation. They allege he then scheduled tasks on the network to change administrator passwords and shut down servers.

Administrator accounts typically carry broader permissions than ordinary user accounts. Misuse of one can therefore affect other people’s access and the availability of shared systems, rather than just the files belonging to a single user.

The alleged mechanism makes this an insider-risk case involving access to critical infrastructure. However, the announcement does not explain how Rhyne obtained access to the account or whether the alleged actions occurred before or after he left the company. It cannot establish that a failure to remove a departing employee’s access was responsible.

The account also describes threats to system availability rather than an allegation that stolen documents would be published. Data extortion can involve pressure through disruption or destruction, not only threats to disclose confidential information.

That distinction is relevant to the broader scope of insider-risk management. Separately, DTEX guidance on risks involving trusted people and AI systems covers deliberate misuse, mistakes and stolen credentials. Those are different routes to harm and should not be treated as interchangeable explanations for this case.

What people are saying

The Justice Department said investigators linked Rhyne to control of the email address used to send the November 2023 demand. Its account of the alleged conduct drew on court filings and statements made in court.

US Attorney Philip R. Sellinger credited the FBI’s Newark investigators with the work leading to the arrest and thanked the bureau’s Kansas City office for its assistance.

The department stressed that the complaint contained allegations, not findings of guilt, and that Rhyne was presumed innocent unless proven guilty.

What happens next

At the point covered by the August 2024 announcement, the case was at the complaint and initial-appearance stage. The release did not provide a date for another hearing or details of Rhyne’s release conditions.

The computer-related extortion charge carried a maximum prison term of five years. The intentional computer damage charge carried up to 10 years, while wire fraud carried up to 20 years. Each count also carried a possible fine of $250,000; these were statutory maximums, not sentences imposed.

Assistant US Attorney Dong Joo Lee, of the Cybercrime Unit in Newark, was assigned to represent the government. The announcement did not include a response from Rhyne or his legal representatives.