An Idaho man has been sentenced to 10 years in prison for hacking into the computer servers of 19 victims across the United States, stealing personally identifiable information (PII) belonging to more than 132,000 people, and attempting to extort a Florida orthodontist for payment in Bitcoin by threatening to disclose stolen patient records and other PII.
According to court documents, in June 2017, Robert Purbeck, 45, of Meridian, purchased access to the computer server of a Griffin, Georgia, medical clinic on a darknet marketplace.
He then used the stolen credentials to illegally access the computers of the medical clinic and removed records that contained sensitive PII for over 43,000 individuals, including names, addresses, birth dates, and social security numbers.
In February 2018, Purbeck purchased access to a City of Newnan, Georgia, Police Department server on a darknet marketplace. Purbeck used the stolen credentials to hack into the City of Newnan computer systems and stole police reports and other documents, including PII, for over 14,000 people.
Purbeck also attempted to extort a Florida orthodontist in July 2018, demanding a ransom payment in Bitcoin in return for his stolen patient files. He threatened to sell the patient and personal information unless the orthodontist paid the ransom.
Additionally, Purbeck threatened to sell the PII of the orthodontist’s minor child. Purbeck harassed the orthodontist and his patients for 10 days with numerous threatening emails and text messages.
On August 21, 2019, the FBI executed a federal search warrant at Purbeck’s home in Meridian. During the search, the FBI seized multiple computers and electronic devices, which contained the personal information of over 132,000 individuals, obtained through Purbeck’s numerous data breaches.
On March 19, Purbeck pleaded guilty to two counts of intentionally accessing and obtaining information from a protected computer without authorization.
In addition to his term of imprisonment, Purbeck was ordered to serve three years of supervised release and pay restitution to his victims in the amount of $1,048,702.98.
