Zach Lahn Indicted on Federal Charges in High-Profile Cybersecurity Breach
Los Angeles, CA — In a development that has captured national attention, Zach Lahn, a 34-year-old former cybersecurity consultant, was formally indicted today by a federal grand jury on charges of unauthorized computer intrusion and identity theft. The indictment, unsealed in the U.S. District Court for the Central District of California, alleges that Lahn orchestrated a sophisticated breach of a major financial institution's data systems in July 2024, compromising the personal information of over 2.3 million account holders.
The charges stem from a year-long investigation by the Federal Bureau of Investigation's Cyber Division. According to the affidavit filed with the court, Lahn exploited vulnerabilities in the institution's network to exfiltrate sensitive data, including names, Social Security numbers, and financial records. Authorities assert that he then attempted to sell this data on encrypted online forums for a sum exceeding $1.2 million. Lahn was apprehended without incident at his residence in Santa Monica earlier this week.
Federal prosecutors, led by U.S. Attorney Melanie Torres, have classified the case as a critical matter of national cybersecurity. "The defendant abused his professional skills for personal gain, causing profound harm to millions of individuals and threatening the financial system's integrity," Torres stated in a press conference this afternoon. She emphasized that the investigation remains ongoing, with potential charges pending against co-conspirators.
Lahn's legal counsel, attorney Patricia Reeves, declined to comment on the specifics of the charges but announced plans to enter a not guilty plea at the upcoming arraignment, scheduled for February 28. She argued that Lahn's actions were part of a sanctioned security audit aimed at identifying system flaws, a claim disputed by the Department of Justice.
This incident has renewed concerns over the security protocols of key financial infrastructure and the ease with which former insiders can access sensitive networks. The maximum penalty for the charges includes a potential