CASE DOSSIER
sentenced
U.S. v. Brett Johnson (ShadowCrew Cybercrime Syndicate)
Docket: 2:04-cr-00725 Court: U.S. District Court for the District of New Jersey Opened: 2004-10-26 Sector: Banking, Consumer Identity, E-Commerce
Key Facts
Status
SENTENCED
Legal disposition
Loss Amount
$4.0 million
Facilitated millions in fraudulent debit card cloning transactions.
Techniques
1
Verified mappings
Defendants
1
Named in charges
- Legal Status: SENTENCED in U.S. District Court for the District of New Jersey.
- Primary Target Sector: Banking, Consumer Identity, E-Commerce.
- Documented Financial Loss: $4.0 million.
- 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Export structured case data and MITRE ATT&CK Navigator layer:
Case Summary
Pioneering cybercriminal known as 'The Original Internet Godfather' who built and operated ShadowCrew, the prototypical dark web marketplace for trafficking in stolen identities and credit card data.
Procedural & Incident Timeline
2005-02-08 arrest
Johnson arrested by U.S. Secret Service in Operation Open Market.
2007-06-20 sentencing
Sentenced to 90 months (7.5 years) in federal prison.
Named Defendants & Operatives
| Defendant | Nationality | Status | Prison Term | Restitution | Notes |
|---|---|---|---|---|---|
| Brett Johnson | United States | sentenced | 90 mo | None | Creator of ShadowCrew dark web forum; sentenced to 90 months in federal prison. |
Substantiated MITRE ATT&CK Techniques
| Technique ID | Technique Name & Tactic | Primary Source Evidence Excerpt | Locator | Verification |
|---|---|---|---|---|
| T1566.002 | Spearphishing Link Initial Access | "Johnson established early phishing operations that cloned PayPal and eBay authentication web pages to steal account credentials." | Indictment ¶ 11, Page 6 | reviewed |
Cite & Embed This Case Record
Public Domain / CC0 Bluebook Legal Citation:
Cyberattack Case Library, U.S. v. Brett Johnson (ShadowCrew Cybercrime Syndicate), No. 2:04-cr-00725 (U.S. District Court for the District of New Jersey 2004), https://cyberattackcaselibrary.pages.dev/cases/us-v-johnson-shadowcrew/
Embeddable Incident Card (HTML):
<iframe src="https://cyberattackcaselibrary.pages.dev/embed/case/us-v-johnson-shadowcrew" width="100%" height="220" style="border:none; border-radius:6px;" loading="lazy"></iframe>