Nicholas Moore, a 24-year-old from Springfield, Tennessee, has pleaded guilty to hacking multiple U.S. federal government systems, including the Supreme Court, and subsequently posting stolen personal data from his victims on his Instagram account, @ihackthegovernment.

While Moore's guilty plea last week initially lacked specific details regarding the extent of his cybercrimes, a newly filed court document has shed light on the full scope of his activities.

The document, first identified by Court Watch's Seamus Hughes on Friday, confirmed that Moore's breaches extended beyond the Supreme Court's electronic document filing system. He also infiltrated the networks of AmeriCorps, a government agency managing volunteer programs, and the Department of Veterans Affairs (VA), which provides healthcare and welfare services to military veterans.

Moore gained unauthorized access to these sensitive systems by utilizing stolen credentials belonging to authorized users. Once inside, he proceeded to access and steal personal data from his victims, subsequently publishing some of this sensitive information on his Instagram account.

Specifics of the Data Breach

The court filing detailed the specific data Moore exposed for each victim:

  • For a Supreme Court victim, identified as "GS," Moore posted their name along with "current and past electronic filing records."
  • An AmeriCorps victim, "SM," had extensive personal details published, including their name, date of birth, email and home addresses, phone number, citizenship and veteran status, service history, and the last four digits of their Social Security number. Moore reportedly boasted about his access to AmeriCorps' servers.
  • Regarding a Department of Veterans Affairs victim, "HW," Moore shared identifiable health information. This included a screenshot from HW's MyHealtheVet account, sent to an associate, which revealed HW's identity and prescribed medications.

According to the court document (USA v. Moore, Doc. 8), Moore now faces a maximum sentence of one year in prison and a fine of up to $100,000 for his actions.