DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Former Public Utility Employee Pleads Guilty to Installing Keylogger Devices on Work Computers

Posted on August 10, 2022 by Dissent

CLEVELAND – John Pelton, 55, of Avon Lake, Ohio, a former Operator with a Northern Ohio public utility, pleaded guilty today to recording the computer keyboard strokes of coworkers while employed at the utility and to making false statements to FBI agents.

Pelton officially pleaded guilty to a Bill of Information charging him with attempting to access a secure computer and obtain information and providing a false statement to a government official.

According to court documents, while working as an Operator with the utility, Pelton purchased two physical keyloggers from eBay with the intent of using them at his place of employment. A physical keylogger is an electronic device that stores and can transmit every keystroke made on a keyboard.

Court documents state that a keylogger is capable of intercepting employee login credentials, messages and any other information typed into a computer. Additionally, these devices have built-in memory capable of storing approximately 16 million keystrokes and could be accessed wirelessly with any Wi-Fi-enabled device, such as a smartphone, allowing the user to download the captured keystrokes remotely.

On Jan. 12, 2021, Pelton installed the keylogger devices at his place of employment on two computers in a control room accessible only via an access badge. According to court records, Pelton installed one keylogger on a control room computer connected to the internet and the utility’s internal network and the other on a second computer used in the delivery of services. Court documents state that the keyloggers would allow Pelton to capture an administrator’s password and access features that he otherwise was unable to access.

According to court documents, one of the computers Pelton installed a keylogger on collected data regarding the use of the utility’s electrical system. The Operators at the utility have the capability to turn the power on and off throughout the network, and, if done incorrectly or inappropriately, an Operator could damage the transmission system, injure employees and possibly negatively impact the energy grid.

On May 24, 2021, Pelton was interviewed by FBI agents at his home regarding his use of the devices. According to court records, Pelton told agents that he did not know what keyloggers were nor their function. Pelton also denied researching keyloggers and stated that he did not remember purchasing or receiving the devices. Court documents state that these claims were false, and Pelton made them knowing that they were false.

Pelton is scheduled to be sentenced on November 16, 2022, before U.S. District Judge David A. Ruiz.

This case was investigated by the Cleveland FBI. This case is being prosecuted by Assistant U.S. Attorneys Segev Phillips and Daniel J. Riedl.

Source: U.S. Attorney’s Office, Northern District of Ohio

Category: Government SectorInsiderU.S.

Post navigation

← CISCO got hit… and immediately took control of the story
Former Twitter Employee Found Guilty of Acting as an Agent of a Foreign Government and Unlawfully Sharing Twitter User Information →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • New evidence links long-running hacking group to Indian government
  • Zaporizhzhia Cyber ​​Police Exposes Hacker Who Caused Millions in Losses to Victims by Mining Cryptocurrency
  • Germany fines Vodafone $51 million for privacy, security breaches
  • Google: Hackers target Salesforce accounts in data extortion attacks
  • The US Grid Attack Looming on the Horizon
  • US govt login portal could be one cyberattack away from collapse, say auditors
  • Two Men Sentenced to Prison for Aggravated Identity Theft and Computer Hacking Crimes
  • 100,000 UK taxpayer accounts hit in £47m phishing attack on HMRC
  • CISA Alert: Updated Guidance on Play Ransomware
  • Almost one year later, U.S. Dermatology Partners is still not being very transparent about their 2024 breach

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • How the FBI Sought a Warrant to Search Instagram of Columbia Student Protesters
  • Germany fines Vodafone $51 million for privacy, security breaches
  • Malaysia enacts data sharing rules for public sector
  • U.S. Enacts Take It Down Act
  • 23andMe Bankruptcy Judge Ponders Trump Bill’s Injunction Impact
  • Hell No: The ODNI Wants to Make it Easier for the Government to Buy Your Data Without Warrant
  • US State Dept. says silence or anonymity on social media is suspicious

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.