US DoJ: Breached Office365 Corporate Accounts Yields Millions

Eve Harrison

A UK national, Robert B. Westbrook, is accused of profiting over $3.75 million through a “hack-to-trade” scheme by breaching the Office365 accounts of corporate executives. Westbrook gained unauthorized access to email accounts, exploiting Microsoft’s password reset feature. His illegal trades took advantage of confidential, non-public financial information. The US Attorney’s office for the District of New Jersey filed charges of securities and wire fraud, while the US Securities and Exchange Commission (SEC) launched a civil suit.

What’s Happening & Why This Matters

Westbrook allegedly accessed email accounts of executives at five publicly traded US companies using password reset features in 2019 and 2020. Through this method, he was able to obtain sensitive quarterly financial information before it became public. He used this insider knowledge to make stock trades, which earned him millions.

One example, cited by prosecutors, details how Westbrook compromised the Office365 email of the Director of Finance at a company, then set auto-forwarding rules to send incoming emails to an account he controlled. This allowed him to monitor and act upon confidential data, such as quarterly earnings reports that indicated a decline in sales.

Once inside the compromised accounts, Westbrook manipulated stock prices by buying shares in companies he knew would perform well and placing “put” options in cases where he expected stock prices to drop after quarterly results were made public. His ability to predict stock movement based on insider knowledge gave him a lucrative edge, earning him over $3.75 million during the period in question.

Federal prosecutors filed charges against Westbrook, including securities fraud, wire fraud, and multiple counts of computer fraud. If convicted, Westbrook faces up to 20 years in prison for securities fraud, along with fines that could reach up to $5 million. Additionally, wire fraud and computer fraud charges carry penalties of up to 20 years and five years in prison, respectively, with further fines depending on the financial impact of his actions.

The US Securities and Exchange Commission’s acting chief, Jorge G. Tenreiro, emphasized that despite Westbrook’s efforts to conceal his identity using anonymous emails, VPN services, and cryptocurrency, advanced data analytics and technology tools led to the discovery of his fraudulent activities.

TF Summary: What’s Next

As Westbrook faces charges in New Jersey’s US District Court, governments continue to crack down on cyber fraud in financial markets. The case raises the importance of securing corporate email systems and presents the growing risks of insider trading schemes fueled by illegal access to sensitive financial information. The SEC and other authorities are expected to continue tightening cybersecurity measures, especially for companies dealing with sensitive data.

Corporations need to invest in stronger email security protocols to avoid similar breaches. The case further shows how sophisticated hacking methods and financial fraud can evade detection without proper safeguards in place.

— Text-to-Speech (TTS) provided by gspeech

Share This Article
Avatar photo
By Eve Harrison “TF Gadget Guru”
Background:
Eve Harrison is a staff writer for TechFyle's TF Sources. With a background in consumer technology and digital marketing, Eve brings a unique perspective that balances technical expertise with user experience. She holds a degree in Information Technology and has spent several years working in digital marketing roles, focusing on tech products and services. Her experience gives her insights into consumer trends and the practical usability of tech gadgets.
Leave a comment