Full Breakdown
British Hacker Ordered to Repay £4.1 Million in Cryptocurrency from Twitter Scam
11/20/2025, 5:51:11 PM
Overview of the Cybercrime Scheme
Joseph James O'Connor, a 26-year-old British hacker, has been ordered to repay £4.1 million ($5.4 million) in cryptocurrency linked to a high-profile Twitter hack that occurred in July 2020. O'Connor, known by the alias "PlugwalkJoe," hijacked over 130 accounts, including those of prominent figures such as former U.S. Presidents Barack Obama and Joe Biden, tech billionaire Elon Musk, and corporate giants like Apple and Uber. The scam involved impersonating these individuals to solicit Bitcoin from followers, promising to double any amount sent to their digital wallets.
Methodology of the Attack
The attack was primarily executed through social engineering tactics rather than advanced hacking techniques. O'Connor and his accomplices persuaded several Twitter employees to disclose their internal login credentials, granting them access to the platform's administrative tools. This breach allowed them to send fraudulent tweets to an estimated 350 million users, resulting in 426 transfers totaling 12.86 Bitcoin, valued at approximately $110,000 at the time, but now worth around $1.2 million.
Legal Proceedings and Sentencing
O'Connor was arrested in Spain in 2021 and extradited to the United States, where he pleaded guilty to charges including computer intrusion, wire fraud, and extortion. In 2023, he was sentenced to five years in prison. Following his conviction, the UK's Crown Prosecution Service (CPS) pursued a civil recovery order to seize additional assets linked to O'Connor's criminal activities. This order, granted on November 14, 2023, resulted in the recovery of 42 Bitcoin and other digital assets, which were believed to have been obtained through various hacking exploits.
Official Statements and Responses
Adrian Foster, Chief Crown Prosecutor for the CPS Proceeds of Crime Division, emphasized the importance of the recovery order, stating, "Even when someone is not convicted in the UK, we are still able to ensure they do not benefit from their criminality." The CPS highlighted that the total value of the seized assets exceeded the direct proceeds from the Twitter hack, indicating O'Connor's involvement in further criminal activities.
Criticism and Opposition
While the CPS has celebrated this recovery as a significant achievement, some critics argue that the legal processes surrounding cybercrime can be slow and complex, often allowing offenders to retain some benefits from their actions before authorities can act. Additionally, there are concerns about the adequacy of cybersecurity measures in social media platforms that allow such breaches to occur.
What's Next for O'Connor?
As O'Connor serves his sentence in the U.S., the CPS will liquidate the seized assets through a court-appointed trustee. This case serves as a cautionary tale for potential cybercriminals, illustrating that international cooperation among law enforcement can lead to the recovery of illicit gains, regardless of where the crimes were committed.
Verbatim Quotes
- “Joseph James O'Connor targeted well-known individuals and used their accounts to scam people out of their crypto assets and money,” — Adrian Foster, Chief Crown Prosecutor, CPS Proceeds of Crime Division
- “We were able to use the full force of the powers available to us to ensure that even when someone is not convicted in the UK, we are still able to ensure they do not benefit from their criminality.” — Adrian Foster, Chief Crown Prosecutor, CPS Proceeds of Crime Division
This case highlights the ongoing challenges of cybersecurity and the legal ramifications of cybercrime, reinforcing the notion that crime does not pay, especially in the digital age.
