A Romanian national has pleaded guilty to charges related to an online intrusion into an Oregon state government office and several other cyber attacks targeting victims in the United States.
Catalin Dragomir, 45, formerly of Constanta, Romania, admitted to obtaining information from a protected computer and committing aggravated identity theft. According to court documents, Dragomir gained unauthorized access to a computer within an Oregon state government network in June 2021 and later sold access to that system. He provided samples of personal identifying information from the compromised machine to potential buyers as proof of his control over the network. Dragomir also sold access credentials for other U.S.-based networks, resulting in losses totaling at least $250,000.
On May 21, 2024, a federal grand jury in Portland indicted Dragomir on five counts including obtaining information from a protected computer, money laundering, and aggravated identity theft. Authorities arrested him in Romania in November 2024; he was extradited to the United States two months later.
Dragomir could face up to five years in prison for obtaining information from a protected computer. He may also be fined up to $250,000 and placed under supervised release for three years. For aggravated identity theft, there is a mandatory consecutive sentence of two years’ imprisonment with an additional possible fine of $250,000 and one year of supervised release.
Sentencing is scheduled for May 26, 2026 before a U.S. District Court Judge. As part of his plea agreement, Dragomir agreed to pay full restitution to victims and forfeit cryptocurrency assets.
The FBI led the investigation. Assistant U.S. Attorney Katherine A. Rykken for the District of Oregon and Trial Attorneys Benjamin A. Bleiberg and Alison M. Zitron from the Justice Department’s Computer Crime and Intellectual Property Section (CCIPS) are prosecuting the case. The Criminal Division’s Office of International Affairs worked with Romanian authorities—including the Ministry of Justice and judiciary—to secure Dragomir’s arrest and extradition. The Department of Justice expressed appreciation for assistance received from Darkweb IQ during the investigation.
“CCIPS investigates and prosecutes cybercrime in coordination with domestic and international law enforcement agencies, often with assistance from the private sector. Since 2020, CCIPS has secured the conviction of over 180 cybercriminals and court orders for the return of over $350 million in victim funds.”
Scott Bradford currently serves as U.S. Attorney; he previously held positions such as Chief of the White Collar Unit and Acting Chief of the Counterintelligence and Export Control Section (https://www.justice.gov/usao-or/staff-profile/meet-united-states-attorney). The U.S. Attorney's Office operates out of Portland, Eugene, and Medford (https://www.justice.gov/usao-or), employing 107 staff members across these locations (https://www.justice.gov/usao-or). This office is one among 93 nationwide operating under the Department of Justice (https://www.justice.gov/usao-or). Its mission includes representing the United States in civil and criminal cases while fostering public trust in federal judicial proceedings (https://www.justice.gov/usao-or/about-district-oregon). Community outreach efforts are ongoing across Oregon as part of broader crime prevention strategies (https://www.justice.gov/usao-or/programs).
