Cyber Threat Actor: Charles Edward Littlejohn

Charles Edward Littlejohn, identified as a former contractor employed by Booz Allen Hamilton, executed unauthorized access and disclosure of confidential U.S. taxpayer information. His actions specifically targeted high-profile individuals and approximately 405,000 taxpayers, predominantly business entities, by compromising IRS data systems. The strategic objective centered on the unlawful acquisition and dissemination of protected financial records, including tax returns, audit details, and related documents, which were subsequently leaked to media organizations. This operation resulted in criminal prosecution, culminating in a maximum five-year prison sentence for the individual. The incident triggered significant institutional repercussions, including the termination of all Treasury Department contracts with Booz Allen Hamilton due to failures in safeguarding sensitive data.

The threat actor exploited privileged access to IRS systems, bypassing security protocols to extract and transfer confidential information to personal devices. No malware families or external tooling were referenced in the publicly reported operation; the compromise relied on insider access and evasion of detection mechanisms. Littlejohn acted independently, with no attributed affiliations to state actors or criminal organizations. The 2018 breach represents his sole publicly documented campaign, characterized by the theft and systematic leakage of taxpayer data to journalists. This incident prompted formal IRS notifications to affected parties, legal claims against involved entities, and intensified scrutiny over government data-sharing practices.