A United States Army soldier was sentenced to 70 months in federal prison on September 25 for stealing the call and text metadata of more than 100 million AT&T customers. Cameron John Wagenius, 22, was sentenced in Seattle and ordered to pay $294,978 in restitution.

Wagenius, who operated online under the alias Kiberphant0m, pleaded guilty to all counts in two separate federal indictments. He downloaded data from customers of the cloud service Snowflake that had exposed credentials and no multi-factor authentication, according to federal prosecutors.

He also claimed to have hacked more than a dozen telecom companies worldwide and publicly extorted them. Despite the scale of the theft, prosecutors said he made only about $1,500 from selling the stolen data.

A co-conspirator pleaded guilty in August 2026, and another suspect wanted in a 2021 T-Mobile breach remains at large. The case highlights how credential theft, not software flaws, enabled one of the largest telecom data thefts in recent years.