Cyber Threat Actor: Eric Walstrom

Eric Walstrom,also known by his real name, is a United States‑based individual who came to public attention in early 2015 after being accused of altering his academic records at New Dorp High School. At the time of the incident he was a 16‑year‑old junior at the school and resided in Staten Island, New York. Media reports describe him as an otherwise average and disengaged student who had attended an elite computer programming camp where he learned languages such as Java and C++. He is referred to in sources solely by his name, with no additional aliases documented.

The actor’s activity was confined to the education sector within the United States, specifically targeting the internal computer systems of a high school. His stated objective, as reflected in the charges and the narrative of the incident, was to improve his own grades, which constitutes a personal academic gain rather than financial profit, espionage, or disruptive intent. The techniques described involve exploiting system vulnerabilities to bypass a password barrier and security software, then configuring access so he could connect from his personal smartphone. He leveraged the programming knowledge acquired at the camp to manipulate the school’s records, with no mention of malware families or off‑the‑shelf tooling; the emphasis is on custom use of coding skills to achieve unauthorized entry and data modification. Initial access was gained through a school computer, after which he maintained persistence via a smartphone‑based connection.

Attribution to any state‑sponsored group or criminal consortium is not evident in the available reporting; the case was handled as a criminal matter with charges including forgery, computer trespass, unauthorized use of a computer, computer tampering, and criminal possession of forgery devices. The notable operation associated with Eric Walstrom is the grade‑changing campaign at New Dorp High School that unfolded between mid‑December 2014 and early February 2015, which prompted an investigation by school IT staff, involvement of law enforcement, and subsequent legal proceedings. This incident remains the sole publicly documented activity linked to the actor.