Former Federal Contractor Convicted for Wiping 96 Government Databases in Retaliatory Attack
A Virginia man has been convicted of federal charges for orchestrating the retaliatory destruction of 96 government databases following his termination from a federal contracting firm.
A federal jury in Virginia has convicted 34-year-old Sohaib Akhter on multiple charges, including conspiracy to commit computer fraud and password trafficking, following a retaliatory cyberattack against his former employer. Akhter, a former federal contractor, was found guilty of orchestrating the deletion of 96 government databases in February 2025 after he and his twin brother, Muneeb Akhter, were terminated from their positions The Record.
The incident began on February 18, 2025, during a remote meeting where the brothers were fired after their employer discovered Sohaib Akhter’s prior felony convictions BleepingComputer. Immediately following their termination, the brothers initiated an unauthorized access campaign against their former company, which provided software services to more than 45 U.S. federal agencies, including the Equal Employment Opportunity Commission (EEOC) The Record.
Prosecutors detailed a systematic effort by the brothers to sabotage their former employer and its government clients. Within hours of their firing, they accessed company systems to write-protect databases, delete 96 of them, and destroy evidence of their activities BleepingComputer. The deleted data included sensitive investigative documents and Freedom of Information Act records from multiple federal agencies, including the Department of Homeland Security BleepingComputer. In a notable attempt to cover their tracks, the brothers reportedly consulted an artificial intelligence assistant on how to clear system logs after deleting a DHS database BleepingComputer.
Beyond the database destruction, the brothers were charged with aggravated identity theft and the theft of government information. Prior to the mass deletion, Sohaib Akhter had provided his brother with the stolen password of an individual who had filed a discrimination complaint with the EEOC, leading to unauthorized access of that person's email account The Record. The brothers also attempted to conceal their actions by wiping company laptops before returning them and discussing the removal of evidence from their home in anticipation of a law enforcement search BleepingComputer.
Sohaib Akhter is scheduled for sentencing on September 9, 2026, and faces a maximum of 21 years in prison The Record. His brother, Muneeb, faces a potential 45-year sentence for his role in the conspiracy BleepingComputer. This case marks the second time the brothers have faced federal charges for computer-related crimes; both served prison time after a 2016 conviction for accessing U.S. State Department systems and stealing the personal information of co-workers and a federal investigator BleepingComputer.
The case highlights the severe risks posed by "insider threats," particularly when individuals with privileged access and prior criminal histories are employed in sensitive roles. The incident underscores the critical need for robust access controls and monitoring, as well as the importance of thorough background checks for contractors handling government data. The destruction of records and subsequent cover-up attempts demonstrate the challenges organizations face in securing infrastructure against malicious actors who possess intimate knowledge of internal systems.