Wagenius was sentenced to 70 months and $294,978 in restitution.

A sentence after a guilty plea is the court's judgment on the counts he admitted. It is not a new accusation. On Friday, Sept. 25, 2026, Cameron John Wagenius, 22, was sentenced in the Western District of Washington to 70 months in prison and ordered to pay $294,978 in restitution after pleas to conspiracy to commit wire fraud, extortion in relation to computer fraud, aggravated identity theft, and two counts of unlawful transfer of confidential phone records information.

The Justice Department said that between April 2023 and Dec. 18, 2024, Wagenius used the online nickname "kiberphant0m" and conspired to obtain login credentials for protected networks of at least 10 victim organizations, including with a tool described as SSH Brute. Telegram chats, stolen data, and extortion both privately and on the forums BreachForums and XSS.is are part of that account. The Department said he attempted to extort at least $1 million in total. Those are the facts the government described in the case that ended in Friday's sentence.

In November 2024, two online posts disclosed stolen confidential non-content call detail records of a government official and of the family of another former official, and threatened further disclosure unless a ransom was paid. Wagenius pleaded guilty on March 5, 2025, to two counts of unlawful transfer of confidential phone records information, and on July 15, 2025, to conspiracy to commit wire fraud, extortion in relation to computer fraud, and aggravated identity theft.

Friday's 70-month term and the $294,978 restitution order are the judgment on those pleas. Wagenius is a former U.S. Army soldier most recently stationed in Texas. The sentence is the court's judgment. It does not reopen the March 5 or July 15 pleas as new charges.