The man, Justin Sean Johnson, aka “TDS” and “DS,” 29, was indicted on charges of conspiracy, wire fraud and aggravated identity and is believed to have sold exfiltrated personally identifiable information (PII) and W-2 information on the dark web.
Johnson is accused of infiltrating the human resource server databases at UPMC in January 2014, as well as of stealing information he later sold on dark web forums. The sold UPMC employee PII was then used to file hundreds of false form 1040 tax returns in 2014.
