Spencer Leak Jr. Arrested in Connection to High-Profile Data Breach Involving Financial Records
AUGUSTA, Maine — According to a joint statement from the Federal Bureau of Investigation and the Maine Attorney General’s Office, Spencer Leak Jr., a 34-year-old former cybersecurity consultant, was formally arrested on Tuesday, November 14, 2024, on federal charges of wire fraud and unauthorized computer access.
The charges stem from an alleged scheme where Leak is accused of exploiting vulnerabilities in a centralized server belonging to a major regional bank, gaining access to over 2.3 million unencrypted financial records. Investigators claim that beginning in March 2024, Leak downloaded sensitive data, including social security numbers and transaction histories, subsequently attempting to sell the information on dark web forums for an estimated $850,000 in cryptocurrency.
Authorities confirmed that Leak was taken into custody without incident at his residence in Augusta. The arrest came following a three-month digital forensics operation by the FBI’s Cyber Division. The case is set to proceed in the U.S. District Court for the District of Maine, where Leak faces a maximum sentence of 20 years for wire fraud and five years for the computer access charge if convicted.