Full Report
A Canadian man was sentenced to 33 years in prison after pleading guilty to targeting more than 145 children across the United States, some as young as 6 years old, in an eight-year-long sextortion scheme. [...]
Analysis Summary
# Incident Report: Multi-Year Sextortion Campaign Targeting Minors
## Executive Summary
Ramanan Pathmanathan, a 40-year-old Canadian man, executed an eight-year-long sextortion campaign targeting at least 145 children in the United States. Posing as a peer on social media, the attacker coerced victims into performing sexual acts, recorded them, and used the footage to blackmail victims into further compliance. The incident resulted in a 33-year prison sentence in the U.S., following a prior 12-year sentence for similar crimes in Canada.
## Incident Details
- **Discovery Date:** Approximately March 2021 (Arrest date)
- **Incident Date:** March 2014 – March 2021
- **Affected Organization:** N/A (Individual private citizens)
- **Sector:** Private Citizens / Minors
- **Geography:** United States (Targeted) and Canada (Attacker location)
## Timeline of Events
### Initial Access
- **Date/Time:** Commencing March 2014
- **Vector:** Social Engineering / Catfishing
- **Details:** The attacker utilized Instagram and Facebook Messenger to contact victims, masquerading as a teenage boy from New Jersey.
### Lateral Movement
- **N/A:** The attacker did not move through a corporate network; instead, he leveraged social circles by obtaining contact information for the victims' friends and family to facilitate blackmail.
### Data Exfiltration/Impact
- **Details:** Coerced sexually explicit video recordings were captured and stored on the attacker’s local desktop computer. Impact included severe psychological trauma to at least 145 victims as young as six years old.
### Detection & Response
- **Detection:** Resulted from multi-jurisdictional law enforcement investigations (FBI and Canadian authorities).
- **Response Actions:** Arrest on March 10, 2021; seizure of desktop computer containing recordings; extradition/prosecution leading to a guilty plea in 2026.
## Attack Methodology
- **Initial Access:** Social engineering via Instagram and Facebook Messenger.
- **Persistence:** Created and maintained multiple fraudulent social media accounts.
- **Defense Evasion:** Used "catfishing" (identity concealment) to mask his true age and location.
- **Collection:** Screen recording of live video chats.
- **Exfiltration:** Saving recorded video files to a personal desktop computer.
- **Impact:** Sextortion and blackmail; threats of public exposure to social networks to force continued compliance.
## Impact Assessment
- **Financial:** N/A (The primary motive was sexual abuse/control rather than monetary gain).
- **Data Breach:** Comprom