Former FBI agent Patrick Steven Yaroch pleads guilty to stealing $2.47M in crypto using wallet credentials from 35 FBI investigations
Matéria consolidada. Reúne 2 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 2 fontes trouxeram em 12/11/2026 12:01; os links antigos trazem para cá.
Former FBI supervisory special agent Patrick Steven Yaroch (37) pleaded guilty to wire fraud and money laundering for stealing about $2,474,380.66 in cryptocurrency (bleepingcomputer.com). He moved funds from wallets tied to 35 FBI investigations, belonging to fraud victims and to suspects under investigation, into his own wallets in roughly 100 transfers (bleepingcomputer.com, malwarebytes.com). Malwarebytes reports the transfers began no later than December 2024 (malwarebytes.com). Per the Justice Department, the thefts compromised multiple FBI investigations of nation-state adversaries and criminal groups, as well as FBI sources and methods used in foreign intelligence collection and criminal cases (bleepingcomputer.com). The case was reported to the DOJ National Security Division on July 29, 2026. Yaroch was arrested and fired on July 31, and the FBI seized his assets (bleepingcomputer.com, malwarebytes.com). Sentencing is set for March 4, with a maximum of 20 years for each charge (bleepingcomputer.com). The sources report no vulnerability, malware or external intrusion. This is an insider access-abuse and credential-governance case, not a patchable flaw.
Detalhes técnicos
- Access method: Yaroch used passphrases taken from the FBI's case management systems and another investigative data-sharing platform (bleepingcomputer.com). Malwarebytes describes him memorizing wallet seed phrases obtained through his access to FBI systems (malwarebytes.com).
- Theft and laundering: He transferred funds to personal wallets and tried to obscure the trail by swapping assets across different cryptocurrencies (bleepingcomputer.com, malwarebytes.com).
- Seized evidence: The FBI seized devices linked to Kraken accounts and written seed phrases (malwarebytes.com).
- Discovery and motive: Malwarebytes reports Yaroch confessed to a colleague. He cited frustration with the FBI's pace in acting against criminal wallets and a plan to finance a new life in Portugal (malwarebytes.com). Bleepingcomputer.com says only that he was self-reported to the DOJ National Security Division on July 29, 2026.
- Context: Malwarebytes notes similar past incidents involving Secret Service personnel (malwarebytes.com).
Remediação
The sources give no formal remediation guidance. Bleepingcomputer.com frames the lesson as insider access abuse and credential governance. Defenders handling seized or evidentiary crypto assets should review who can view wallet credentials and how that access is logged and audited. This is an inference from the case, not guidance from the sources.
Relatos divergentes
- Wallet ownership: Bleepingcomputer.com says the wallets belonged to fraud victims and to suspects under FBI investigation. Malwarebytes.com describes them as criminal wallets linked to FBI investigations. Bleepingcomputer.com's description, which cites the DOJ, is more detailed.
- Credential type: Bleepingcomputer.com refers to passphrases taken from FBI systems. Malwarebytes.com refers to memorized seed phrases. These may describe the same material, and the sources do not say.
- How the case surfaced: Bleepingcomputer.com says he was self-reported to the DOJ National Security Division on July 29, 2026. Malwarebytes.com (the more recent source, published November 12) says he confessed to a colleague. The two are not necessarily contradictory, but the sources do not reconcile them.
Linha do tempo
-
Former FBI Supervisor Steals $2.47M in Cryptocurrency from Criminal Wallets Linked to FBI Investigations
ler a análise desta fonte ocultar
Patrick Steven Yaroch, a former FBI supervisor, pleaded guilty to wire fraud and money laundering after stealing approximately $2.47 million from cryptocurrency wallets involved in 35 FBI investigations. Using access to FBI systems, Yaroch memorized wallet seed phrases and transferred funds to personal wallets, attempting to obfuscate the trail by swapping assets across different cryptocurrencies. The theft spanned about 100 transfers starting no later than December 2024 and compromised multiple investigations involving criminal and nation-state actors. Yaroch confessed to a colleague, citing frustration with the FBI's pace in acting against criminal wallets and his plan to finance a new life in Portugal. The FBI responded by terminating Yaroch and seizing his assets, including devices linked to Kraken accounts and written seed phrases. This case highlights insider threats and corruption within law enforcement related to cryptocurrency evidence handling, referencing similar past incidents within Secret Service personnel.
-
Former FBI agent pleads guilty to stealing $2.47M in crypto using credentials from 35 FBI investigations
ler a análise desta fonte ocultar
A former FBI supervisory special agent, Patrick Steven Yaroch (37), pleaded guilty to wire fraud and money laundering after using passphrases taken from the bureau's case management systems and another investigative data-sharing platform. He transferred funds from the cryptocurrency wallets of fraud victims and of suspects under FBI investigation into his own wallets, about 100 transfers across 35 FBI investigations, for roughly $2,474,380.66 in proceeds, then tried to launder them by swapping them for other cryptocurrencies. According to the Justice Department, the thefts also compromised multiple FBI investigations of nation-state adversaries and criminal groups, as well as FBI sources and methods used in foreign intelligence collection and criminal cases. The insider was self-reported to the DOJ National Security Division on July 29, 2026, arrested on July 31, and fired the same day. The article reports no vulnerability, malware or external intrusion, so the operational risk for defenders is insider access abuse and credential governance, not a patchable flaw. Sentencing is set for March 4, with a maximum of 20 years for each charge.