Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
Tech contractor Cameron Curry sentenced to 2 years for insider attack and extortion of Brightly Software.
Cameron Curry, a former tech contractor for Brightly Software, has been sentenced to two years in prison for an insider attack and extortion. Curry stole sensitive corporate and employee data, then threatened to leak it unless the company paid him. He ultimately extorted Brightly Software for over $7,500, though he initially demanded around $2.5 million. The FBI was able to identify and build a case against Curry due to several operational security mistakes he made.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Brightly Software?
Get an email when a new story names Brightly Software, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCameron Curry, a tech contractor with privileged access to Brightly Software's systems, exploited that access to steal sensitive corporate and employee data and then attempted to extort the company for millions. This case highlights the critical risk posed by third-party contractors who are granted excessive or poorly monitored access to sensitive systems. Organizations often extend trust to contractors without applying the same rigorous access controls and oversight used for full-time employees. The FBI was able to build a case largely because Curry made operational security mistakes, underscoring that insider threats are often detectable when proper logging and monitoring are in place.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Data loss prevention (DLP)
Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Loot