DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Former Public Utility Employee Pleads Guilty to Installing Keylogger Devices on Work Computers

Posted on August 10, 2022 by Dissent

CLEVELAND – John Pelton, 55, of Avon Lake, Ohio, a former Operator with a Northern Ohio public utility, pleaded guilty today to recording the computer keyboard strokes of coworkers while employed at the utility and to making false statements to FBI agents.

Pelton officially pleaded guilty to a Bill of Information charging him with attempting to access a secure computer and obtain information and providing a false statement to a government official.

According to court documents, while working as an Operator with the utility, Pelton purchased two physical keyloggers from eBay with the intent of using them at his place of employment. A physical keylogger is an electronic device that stores and can transmit every keystroke made on a keyboard.

Court documents state that a keylogger is capable of intercepting employee login credentials, messages and any other information typed into a computer. Additionally, these devices have built-in memory capable of storing approximately 16 million keystrokes and could be accessed wirelessly with any Wi-Fi-enabled device, such as a smartphone, allowing the user to download the captured keystrokes remotely.

On Jan. 12, 2021, Pelton installed the keylogger devices at his place of employment on two computers in a control room accessible only via an access badge. According to court records, Pelton installed one keylogger on a control room computer connected to the internet and the utility’s internal network and the other on a second computer used in the delivery of services. Court documents state that the keyloggers would allow Pelton to capture an administrator’s password and access features that he otherwise was unable to access.

According to court documents, one of the computers Pelton installed a keylogger on collected data regarding the use of the utility’s electrical system. The Operators at the utility have the capability to turn the power on and off throughout the network, and, if done incorrectly or inappropriately, an Operator could damage the transmission system, injure employees and possibly negatively impact the energy grid.

On May 24, 2021, Pelton was interviewed by FBI agents at his home regarding his use of the devices. According to court records, Pelton told agents that he did not know what keyloggers were nor their function. Pelton also denied researching keyloggers and stated that he did not remember purchasing or receiving the devices. Court documents state that these claims were false, and Pelton made them knowing that they were false.

Pelton is scheduled to be sentenced on November 16, 2022, before U.S. District Judge David A. Ruiz.

This case was investigated by the Cleveland FBI. This case is being prosecuted by Assistant U.S. Attorneys Segev Phillips and Daniel J. Riedl.

Source: U.S. Attorney’s Office, Northern District of Ohio

No related posts.

Category: Government SectorInsiderU.S.

Post navigation

← CISCO got hit… and immediately took control of the story
Former Twitter Employee Found Guilty of Acting as an Agent of a Foreign Government and Unlawfully Sharing Twitter User Information →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Ransomware in Italy, strike at the Diskstation gang: hacker group leader arrested in Milan
  • A year after cyber attack, Columbus could invest $23M in cybersecurity upgrades
  • Gravity Forms Breach Hits 1M WordPress Sites
  • Stormous claims to have protected health info on 600,000 patients of North Country Healthcare. The data appear fake. (1)
  • Back from the Brink: District Court Clears Air Regarding Individualized Damages Assessment in Data Breach Cases
  • Multiple lawsuits filed against Doyon Ltd over April 2024 data breach and late notification
  • Chinese hackers suspected in breach of powerful DC law firm
  • Qilin Emerged as The Most Active Group, Exploiting Unpatched Fortinet Vulnerabilities
  • CISA tags Citrix Bleed 2 as exploited, gives agencies a day to patch
  • McDonald’s McHire leak involving ‘123456’ admin password exposes 64 million applicant chat records

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Here’s What a Reproductive Police State Looks Like
  • Meta investors, Zuckerberg to square off at $8 billion trial over alleged privacy violations
  • Australian law is now clearer about clinicians’ discretion to tell our patients’ relatives about their genetic risk
  • The ICO’s AI and biometrics strategy
  • Trump Border Czar Boasts ICE Can ‘Briefly Detain’ People Based On ‘Physical Appearance’
  • DeleteMyInfo Wins 2025 Digital Privacy Excellence Award from Internet Safety Council
  • TikTok Loses First Appeal Against £12.7M ICO Fine, Faces Second Investigation by DPC

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.