A Romanian national has pleaded guilty in a U.S. federal court to charges stemming from a 2021 cyber intrusion that compromised the computer network of an Oregon state government office and facilitated additional attacks on multiple American victims.
Catalin Dragomir, 45, formerly of Constanta, Romania, admitted to selling unauthorized access to a computer on the Oregon state government office’s network after gaining entry in June 2021, according to court documents made public this week by the U.S. Department of Justice.
Prosecutors say Dragomir not only sold the access but also provided prospective buyers with samples of personal identifying information harvested from the compromised system to demonstrate his control. In addition to the Oregon intrusion, he sold access to networks belonging to numerous other U.S. victims, resulting in at least $250,000 in documented losses.
Dragomir was initially arrested in Romania in November 2024 and was subsequently extradited to the United States in January 2025 to face federal charges. He pleaded guilty to one count of obtaining information from a protected computer and one count of aggravated identity theft.
Legal Consequences and Sentencing
Under the terms of his guilty plea, Dragomir faces a maximum of five years in prison for the computer intrusion offense, followed by a mandatory consecutive sentence of two years for aggravated identity theft. In addition to imprisonment, he could receive fines of up to $250,000 per count and supervised release following his sentence. A federal judge will determine the exact sentence after considering U.S. Sentencing Guidelines and other factors at a hearing scheduled for May 26, 2026.
As part of the plea agreement, the defendant has agreed to pay full restitution to his victims and forfeit cryptocurrency seized during the investigation.
Investigation and Prosecution
The FBI’s Portland Field Office led the investigation, working alongside prosecutors from the U.S. Attorney’s Office for the District of Oregon and trial attorneys from the Department of Justice’s Criminal Division’s Computer Crime and Intellectual Property Section (CCIPS). The effort also depended on international cooperation, with the Romanian Ministry of Justice and judiciary assisting U.S. authorities in securing Dragomir’s arrest and extradition.
Department officials noted that CCIPS continues to coordinate globally with law enforcement and the private sector to pursue cybercriminals, aiming to protect victims and recover losses.
