Nathan Francis Wyatt, 39, was sentenced to five years in prison and ordered to pay $1,467,048 in restitution to victims.
According to court documents, Wyatt was part of the TDO hacker group since 2016. The group operated by hacking into large companies, stealing their sensitive data, and then asking for huge ransoms.
If victims didn't pay, the hackers would sell their data on hacking forums, leak it on the public internet, or tip journalists about the breach in order to generate negative press for the hacked company.
Wyatt's role in the scheme was to contact victims and demand ransom payments. He was connected to the group after he used phone numbers registered in his name to contact some of the victims.
Wyatt was arrested in 2017 in the UK and extradited to the US in December 2019 to face charges.
Most of the other members of the TDO group remain at large.
In May 2018, Serbian authorities arrested a 39-year-old man in Belgrade on charges of being one of the TDO members; however, it's unclear how he was connected to the group as authorities only shared the man's initials (S.S.) and birth year (1980), which made tracking his case harder.
The TDO group has a long and prodigious hacking history. The group has taken credit or has been linked to tens of hacks, such as: