Romanian Man Pleads Guilty to Hacking Oregon State Computer Network

Catalin Dragomir sold access to the compromised system and other victims' networks, causing over $250,000 in losses.

Published on Mar. 1, 2026

Got story updates? Submit your updates here. ›

Catalin Dragomir, a 45-year-old Romanian national, has pleaded guilty to hacking into an Oregon state government computer network and selling access to it, as well as access to other U.S. victims' systems. Dragomir's actions caused over $250,000 in losses and led to his arrest in Romania in 2024 and extradition to the U.S. in 2025.

Why it matters

This case highlights the growing threat of international cybercriminals targeting state and local government computer systems, which can have significant financial and operational impacts. It also underscores the importance of robust cybersecurity measures to protect sensitive government data and infrastructure.

The details

According to court documents, in June 2021 Dragomir gained unauthorized access to a computer connected to an Oregon state government office. He then sold access to that compromised system, as well as access to other victims' networks across the U.S., causing losses of at least $250,000. Dragomir was indicted by a federal grand jury in Portland in May 2024 and extradited from Romania in January 2025.

  • In June 2021, Dragomir gained unauthorized access to an Oregon state government computer.
  • In May 2024, a federal grand jury in Portland indicted Dragomir.
  • In November 2024, Dragomir was arrested in Romania.
  • In January 2025, Dragomir was extradited to the U.S.

The players

Catalin Dragomir

A 45-year-old Romanian national who pleaded guilty to hacking into an Oregon state government computer network and selling access to it, as well as other victims' systems.

U.S. Attorney's Office - District of Oregon

The federal prosecutors who handled the case against Dragomir.

Got photos? Submit your photos here. ›

What’s next

Dragomir is scheduled to be sentenced on May 26, 2026, where he could face up to 7 years in prison and significant fines.

The takeaway

This case underscores the importance of robust cybersecurity measures to protect sensitive government data and infrastructure from international cybercriminals who seek to exploit vulnerabilities for financial gain.