FBI agent stole $2.5 million in crypto from hackers under investigation
stole million has been convicted or has pleaded guilty in a case brought by Department of Justice.
stole million has been convicted or has pleaded guilty in a case brought by Department of Justice.
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation.
37-year-old Patrick Steven Yaroch worked on a national security investigative squad at the FBI Boston Division (FBI BS) from 2017 to 2025, and as a supervisory special agent in the FBI Headquarters (FBIHQ) Counterintelligence and Espionage Division (CED) between February 2025 and July 2026.
He was arrested on July 31 at his residence after self-reporting the crypto theft to Department of Justice (DOJ) National Security Division (NSD) and FBIHQ employees on July 29.
ChatGPT said that The prosecutors added that Yaroch's actions have compromised multiple FBI investigations involving both nation-state adversaries and criminal groups, as well as FBI sources and methods used in criminal investigations and foreign intelligence collection.
Past victims of stole million are not made whole by this action alone, and anyone still running systems compromised before this action remains affected.
Yaroch pleaded guilty on Thursday to wire fraud and money laundering charges, admitting that he used passphrases (obtained from the FBI's case management systems and another platform used to share investigative data) to transfer funds from the cryptocurrency wallets of fraud victims or suspects under FBI investigation to his own wallets.
Adaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.
Taking down the infrastructure is real progress, but the skills and the playbook behind it don't disappear with the servers -- treat this as a disruption, not a resolution.
See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
This action was brought by Department of Justice, which is the body to watch for further updates.
Throughout his wire fraud scheme, Yaroch conducted about 100 fraudulent transfers using credentials related to 35 separate FBI investigations.
stole million is now dealing with a resolved criminal case, with Department of Justice leading the action.
If your environment shows any indicators associated with stole million, don't assume this action alone removed that exposure -- check for persistence regardless of the takedown.
Treat this as a disruption worth noting, not a reason to deprioritize monitoring for the same group's affiliates or rebrands.
What happened
stole million has been convicted or has pleaded guilty in a case brought by Department of Justice.
A former FBI agent has pleaded guilty to stealing nearly $2.5 million from the wallets of fraud victims and nation-state hackers under investigation.
37-year-old Patrick Steven Yaroch worked on a national security investigative squad at the FBI Boston Division (FBI BS) from 2017 to 2025, and as a supervisory special agent in the FBI Headquarters (FBIHQ) Counterintelligence and Espionage Division (CED) between February 2025 and July 2026.
What changed
He was arrested on July 31 at his residence after self-reporting the crypto theft to Department of Justice (DOJ) National Security Division (NSD) and FBIHQ employees on July 29.
ChatGPT said that The prosecutors added that Yaroch's actions have compromised multiple FBI investigations involving both nation-state adversaries and criminal groups, as well as FBI sources and methods used in criminal investigations and foreign intelligence collection.
Who is affected
Past victims of stole million are not made whole by this action alone, and anyone still running systems compromised before this action remains affected.
Yaroch pleaded guilty on Thursday to wire fraud and money laundering charges, admitting that he used passphrases (obtained from the FBI's case management systems and another platform used to share investigative data) to transfer funds from the cryptocurrency wallets of fraud victims or suspects under FBI investigation to his own wallets.
Adaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.
Why it matters
Taking down the infrastructure is real progress, but the skills and the playbook behind it don't disappear with the servers -- treat this as a disruption, not a resolution.
See what's getting through with a 14-day read-only scan of Microsoft 365 or Google Workspace, with no MX changes.
Technical details
This action was brought by Department of Justice, which is the body to watch for further updates.
Throughout his wire fraud scheme, Yaroch conducted about 100 fraudulent transfers using credentials related to 35 separate FBI investigations.
Response
stole million is now dealing with a resolved criminal case, with Department of Justice leading the action.
What security teams should do
Treat this as a disruption worth noting, not a reason to deprioritize monitoring for the same group's affiliates or rebrands.
What remains unknown
The exact impact on specific FBI investigations remains unclear.
The total number of affected victims or investigations is not detailed.
Whether additional charges might be filed is unknown.