Inside the Database Destruction: How Twin Ex-Contractors Sabotaged U.S. Federal Systems

It started with a click-the abrupt termination of Sohaib and Muneeb Akhter during a remote meeting in February 2025. But what followed wasn’t resignation-it was retaliation. Within hours, the twin brothers, once trusted government contractors, orchestrated one of the most brazen acts of digital sabotage against U.S. federal agencies in recent memory, erasing scores of sensitive databases and scrambling to cover their tracks. The fallout would ripple across more than 45 federal agencies, leaving investigators racing to reconstruct the damage and understand how two previously convicted insiders managed to strike again.

The Akhter brothers’ digital crime spree is a textbook example of the dangers posed by insider threats in high-security environments. After serving prison time for earlier offenses involving the State Department-including stealing personal data from colleagues and a law enforcement investigator-the pair were astonishingly rehired by a contractor with access to data from dozens of government agencies. When their previous convictions came to light, their employer acted swiftly, terminating both during a remote meeting. But within hours of being fired, the Akhters used their still-active access to inflict maximum damage.

According to court documents, the brothers methodically write-protected government databases, preventing further changes, before systematically deleting them. In total, nearly 100 databases were wiped, including crucial investigative files and Freedom of Information Act (FOIA) records. Their technical acumen was on full display-not only did they destroy data, but they also ran commands to erase evidence and even wiped their company-issued laptops before sending them back. In a telling moment, after deleting a Department of Homeland Security database, they sought advice from an AI assistant on how to clear system logs, highlighting the evolving role of artificial intelligence in both cybercrime and digital forensics.

Prosecutors described the attack as calculated and destructive, with the Akhters even discussing how to sanitize their home in anticipation of a law enforcement search. The deliberate nature of their actions, combined with the sensitivity of the data involved, underscores a critical vulnerability: the risk posed by insiders with both technical access and motive for revenge.

As the brothers await sentencing-Sohaib facing up to 21 years, Muneeb up to 45-the case sends a stark warning to government agencies and private contractors alike. Background checks, access controls, and monitoring are only as effective as their enforcement. When they fail, the consequences can be catastrophic, echoing across the federal landscape for years to come.

WIKICROOK

• Insider Threat: An insider threat is when someone within an organization misuses their access to systems or data, intentionally or accidentally causing harm.
• Write: Write means saving or modifying data on storage devices. In cybersecurity, controlling write access helps prevent unauthorized changes or security breaches.
• System Logs: System logs are digital records that track activity on computers or networks, helping detect suspicious actions and investigate potential security breaches.
• Freedom of Information Act (FOIA): The Freedom of Information Act (FOIA) is a U.S. law that lets the public request and access records from federal government agencies, promoting transparency.
• Digital Forensics: Digital forensics involves collecting and analyzing digital evidence to investigate cybercrimes, support law enforcement, and ensure data integrity in legal cases.