Federal authorities in New York have filed a criminal indictment against Christian Erazo for conspiring with others to commit wire fraud and computer intrusion, as well as committing aggravated identity theft, by hacking a music producer’s social networking account to impersonate the producer in order to solicit and obtain unreleased music from other artists, which he then directed the artists to send to a fake email account in the producer’s name. In addition, Erazo hacked the online accounts of two music management companies in order to steal unreleased music of numerous music industry professionals. Erazo was arrested in Austin, Texas.
U.S. Attorney Geoffrey S. Berman said: “Christian Erazo and his co-conspirators allegedly hacked the accounts of music producers and management companies in order to steal over 50 gigabytes of content – including some music that had yet to be publicly released – and leaked it on the internet. Not only did this scheme cause the companies, producers, and artists financial harm, Erazo deprived the artists of the ability to release their own exclusive content at their discretion. Erazo’s conduct is a reminder of the potential destruction hackers can inflict, and the need for all users to practice strong measures against cyber intrusions.”
HSI Special Agent in Charge Peter C. Fitzhugh said: “Erazo’s alleged involvement in a hacking scheme to commit wire fraud and downloading 50 gigs of music, some unreleased, has affected the finances and reputations of a producer and several recording artists. Fraud schemes like this don’t just affect the victim, but can also trickle down negative effects to the consumer. New York’s robust cyber capabilities allow agents to track down criminals hiding behind their computer screen anywhere in the world to face the consequences of their actions.”
According to the Superseding Indictment filed today in Manhattan federal court:
From at least in or about late 2016 through at least in or about April 2017, Erazo and others known and unknown, unlawfully obtained unauthorized access to Internet cloud storage service accounts of two music management companies and a music producer (“Producer Victim-1”) by, among other things, using the credentials, or usernames and passwords, of individuals with authorized access to those accounts. From those accounts, Erazo and his co-conspirators stole over approximately 50 gigabytes of music, including music that had not yet been publicly released from over 20 recording artists, as well as usernames and passwords to other online accounts, among other things. Erazo and his co-conspirators also leaked on public online forums music that had not yet been publicly released, causing financial and reputational harm to Producer Victim-1 and other recording artists.
In addition, from at least in or about late 2016 through at least in or about late 2017 Erazo, and others known and unknown, unlawfully accessed without authorization a social networking account belonging to Producer Victim-1, from which Erazo and a co-conspirator (“CC-1”) impersonated Producer Victim-1 and sent private messages to numerous recording artists to solicit music from them that they had not yet released. Erazo and CC-1 directed these artists to send their music to a fake email account that Erazo created that incorporated Producer Victim-1’s professional name, which numerous artists did.
The identity of the targeted artists were not revealed.
* * *
Erazo, 27, of Austin, Texas, is charged with one count of conspiracy to commit wire fraud, which carries a maximum sentence of 20 years; one count of conspiracy to commit computer intrusion, which carries a maximum sentence of five years; and one count of aggravated identity theft, which carries a mandatory minimum term of imprisonment of two years.