Original Article Text

Click to Toggle View

Cloud engineer gets 2 years for wiping ex-employer’s code repos. Miklos Daniel Brody, a cloud engineer, was sentenced to two years in prison and a restitution of $529,000 for wiping the code repositories of his former employer in retaliation for being fired by the company.  First Republic Bank was a commercial bank in the U.S., employing over seven thousand people and having an annual revenue of $6.75 billion. The bank closed on May 1, 2023, and was sold to JPMorgan Chase. According to the U.S. Department of Justice (DoJ) announcement, Brody was fired on March 11, 2020, from First Republic Bank (FRB) in San Francisco, where he worked as a cloud engineer. The court documents state that Brody's employment was terminated after he violated company policies by connecting a USB drive containing pornography to company computers. Following his dismissal, Brody allegedly refused to return his work laptop and instead used his still-valid account to access the bank's computer network and cause damages estimated to be above $220,000 "Among other things, Brody deleted the bank's code repositories, ran a malicious script to delete logs, left taunts within the bank's code for former colleagues, and impersonated other bank employees by opening sessions in their names," describes the U.S. DOJ announcement. "He also emailed himself proprietary bank code that he had worked on as an employee, which was valued at over $5,000." Until his access to FRB's network was eventually terminated on March 12, 2020, Brody had performed the following actions: After the incident, Brody falsely reported to the San Francisco Police Department that the FRB-issued laptop had been stolen from his car. He continued to uphold this story when interviewed by United States Secret Service agents following his arrest in March 2021. Eventually, in April 2023, Brody pleaded guilty to lying about the laptop and to two charges concerning violation of the Computer Fraud and Abuse Act. In addition to the two-year prison term and the payment of the restitution, Brody will serve three years of supervised release.

Daily Brief Summary

CYBERCRIME // Cloud Engineer Sentenced for Retaliatory Code Deletion at Former Employer

Miklos Daniel Brody, a former cloud engineer, received a two-year prison sentence and was ordered to pay $529,000 for deleting code repositories from his former employer’s network.

The criminal act was in response to Brody’s termination from First Republic Bank (FRB), a major U.S. bank acquired by JPMorgan Chase.

Brody's employment at FRB ended after a policy violation involving connecting a USB drive with inappropriate content to company computers.

After being fired, Brody utilized his still-active credentials to access FRB's systems, where he deleted code, ran a script to erase logs, left taunting messages, and impersonated other employees.

He also emailed proprietary bank code, valued at over $5,000, to himself and continued to lie about the whereabouts of his FRB-issued laptop, which he claimed was stolen.

Brody’s unauthorized actions resulted in damages exceeding $220,000, and he was eventually apprehended by U.S. Secret Service agents.

Following his guilt plea on charges under the Computer Fraud and Abuse Act and for lying to law enforcement, Brody will also face three years of supervised release post-imprisonment.