CASE DOSSIER sentenced

U.S. v. Brett Johnson (ShadowCrew Cybercrime Syndicate)

Docket: 2:04-cr-00725 Court: U.S. District Court for the District of New Jersey Opened: 2004-10-26 Sector: Banking, Consumer Identity, E-Commerce

Key Facts

Status
SENTENCED
Legal disposition
Loss Amount
$4.0 million
Facilitated millions in fraudulent debit card cloning transactions.
Techniques
1
Verified mappings
Defendants
1
Named in charges
  • Legal Status: SENTENCED in U.S. District Court for the District of New Jersey.
  • Primary Target Sector: Banking, Consumer Identity, E-Commerce.
  • Documented Financial Loss: $4.0 million.
  • 1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.
Export structured case data and MITRE ATT&CK Navigator layer:

Case Summary

Pioneering cybercriminal known as 'The Original Internet Godfather' who built and operated ShadowCrew, the prototypical dark web marketplace for trafficking in stolen identities and credit card data.

Procedural & Incident Timeline

2005-02-08 arrest

Johnson arrested by U.S. Secret Service in Operation Open Market.

2007-06-20 sentencing

Sentenced to 90 months (7.5 years) in federal prison.

Named Defendants & Operatives

Defendant Nationality Status Prison Term Restitution Notes
Brett Johnson United States sentenced 90 mo None Creator of ShadowCrew dark web forum; sentenced to 90 months in federal prison.

Substantiated MITRE ATT&CK Techniques

Technique ID Technique Name & Tactic Primary Source Evidence Excerpt Locator Verification
T1566.002 Spearphishing Link
Initial Access
"Johnson established early phishing operations that cloned PayPal and eBay authentication web pages to steal account credentials." Indictment ¶ 11, Page 6 reviewed

Cite & Embed This Case Record

Public Domain / CC0
Bluebook Legal Citation:
Cyberattack Case Library, U.S. v. Brett Johnson (ShadowCrew Cybercrime Syndicate), No. 2:04-cr-00725 (U.S. District Court for the District of New Jersey 2004), https://cyberattackcaselibrary.pages.dev/cases/us-v-johnson-shadowcrew/
Embeddable Incident Card (HTML):
<iframe src="https://cyberattackcaselibrary.pages.dev/embed/case/us-v-johnson-shadowcrew" width="100%" height="220" style="border:none; border-radius:6px;" loading="lazy"></iframe>