Supreme Court and Federal Agency Breached by Instagram Hacker “I Hacked the Government”

In a brazen digital intrusion that has rattled the highest echelons of the U.S. judicial and federal systems, 21-year-old Noah Michael Moore has been charged with orchestrating a series of sophisticated cyberattacks targeting some of the nation’s most sensitive and secure online platforms. According to newly unsealed court documents filed in the U.S. District Court for the District of Columbia, Moore systematically exploited stolen login credentials to infiltrate systems belonging to the U.S. Supreme Court, AmeriCorps, and the Department of Veterans Affairs — all while brazenly documenting and broadcasting his exploits on Instagram under the now-infamous handle @ihackedthegovernment.

The Supreme Court Breach: A Digital Heist at the Nation’s Highest Court

Between late 2022 and late 2023, Moore allegedly gained unauthorized access to the Supreme Court’s electronic filing system on 25 separate occasions, sometimes logging in multiple times in a single day. Using credentials stolen from an authorized user identified only as “GS,” Moore extracted a treasure trove of personal data, including GS’s full name, email address, phone number, home address, date of birth, and the private answers to three security questions — information typically used to reset passwords and bypass authentication protocols.

But Moore didn’t stop at mere data collection. On July 29, August 18, and November 28, 2023, he took to Instagram to post screenshots of GS’s Supreme Court dashboard, publicly exposing not only GS’s identity but also a complete log of all their electronic filing activity. The posts, which remain visible in cached form, were accompanied by captions that mocked the Court’s cybersecurity measures and flaunted Moore’s apparent impunity.

AmeriCorps and VA Systems Also Compromised

The court filings reveal that Moore’s digital rampage extended beyond the Supreme Court. Using similarly stolen credentials, he accessed a My AmeriCorps account, extracting and publicly posting the user’s name, date of birth, email address, home address, phone number, citizenship status, veteran status, service history, and the last four digits of their Social Security number. The exposure of such sensitive data — typically protected under federal privacy laws — has raised alarms among cybersecurity experts and privacy advocates alike.

Even more troubling is Moore’s alleged intrusion into the Department of Veterans Affairs’ My HealtheVet platform, a system designed to give veterans secure access to their medical records. Using stolen login credentials from a U.S. Marine Corps veteran identified as “HW,” Moore accessed the platform on five separate occasions, obtaining HW’s personal health information, including prescribed medications and blood type.

On October 13, 2023, Moore allegedly shared a screenshot of HW’s My HealtheVet account with an associate, clearly identifying HW and listing the medications he had been prescribed. He then took to Instagram to publicly post HW’s full name, home address, service branch, email address, phone number, and blood type — a shocking breach of medical privacy that has drawn sharp condemnation from veterans’ rights groups.

A Pattern of Calculated Aggression

What sets this case apart from typical cyberattacks is not just the sensitivity of the targets, but the calculated, public nature of Moore’s actions. Rather than operating in the shadows, Moore appeared to revel in his intrusions, using Instagram as both a trophy case and a platform for taunting federal agencies. His choice of username — @ihackedthegovernment — was a deliberate provocation, a digital middle finger aimed at the very institutions tasked with protecting the nation’s digital infrastructure.

The government’s filing paints a picture of a hacker who was not only technically adept but also strategically ruthless. By targeting individuals with access to high-value systems, Moore was able to leapfrog traditional security barriers and gain entry to networks that would otherwise be nearly impenetrable. His method — credential theft followed by public exposure — bears the hallmarks of hacktivism, though the exact motivations behind his actions remain unclear.

The Fallout: Questions of Accountability and Security

The breaches have sparked a wave of scrutiny over the cybersecurity practices of federal agencies, particularly those that handle sensitive personal and medical data. How did Moore obtain the stolen credentials? Were the accounts protected by multi-factor authentication? And why were such high-value systems accessible without more robust safeguards?

The Department of Veterans Affairs has launched an internal review, while the Supreme Court has remained tight-lipped about the specifics of the breach. Meanwhile, privacy advocates are calling for stricter federal data protection laws and harsher penalties for those who exploit vulnerabilities in government systems.

Legal Consequences: A High-Stakes Trial Ahead

Moore now faces a litany of federal charges, including unauthorized access to computer systems, identity theft, and the public disclosure of individually identifiable health information. If convicted, he could face decades in prison and substantial fines. Prosecutors have characterized his actions as a direct threat to national security, arguing that the exposure of personal data belonging to Supreme Court personnel and veterans could have far-reaching consequences.

Moore’s defense team has yet to issue a formal statement, but legal experts speculate that they may argue his actions were a form of digital protest or that he was testing the security of government systems in the public interest. However, given the scale and brazenness of the breaches, such arguments are likely to face an uphill battle in court.

The Broader Implications: A Wake-Up Call for Cybersecurity

This case serves as a stark reminder of the evolving nature of cyber threats and the vulnerabilities that persist even in the most secure systems. As more government services move online, the attack surface for hackers continues to expand, creating new opportunities for exploitation. The Moore case underscores the need for continuous investment in cybersecurity infrastructure, rigorous training for personnel, and the adoption of zero-trust security models that assume no user or system is inherently trustworthy.

Moreover, it raises uncomfortable questions about the balance between transparency and security in the digital age. While Moore’s actions were illegal and deeply harmful, they also exposed glaring weaknesses in systems that millions of Americans rely on. In that sense, his hacks were not just acts of digital vandalism, but also a wake-up call — one that federal agencies can ill afford to ignore.

Tags:

Supreme Court breach, cybersecurity, federal hacking, Noah Michael Moore, @ihackedthegovernment, My HealtheVet hack, AmeriCorps breach, credential theft, identity theft, medical data exposure, veterans privacy, digital protest, zero-trust security, government cybersecurity, hacktivism, data breach, national security threat, Instagram hacker, Supreme Court cybersecurity, VA data breach

Viral Phrases:

“I hacked the government,” Supreme Court electronic filing system hacked, Marine veteran’s medical records exposed, stolen credentials used to access SCOTUS, hacker flaunts breaches on Instagram, federal agency cybersecurity failures, personal data of Supreme Court staffer leaked, My AmeriCorps account compromised, Department of Veterans Affairs hacked, government systems not as secure as we thought, digital heist at the highest court, brazen cyberattacks on federal agencies, wake-up call for cybersecurity, zero-trust security needed now, accountability in the digital age, hackers targeting sensitive government data, the new era of hacktivism, exposing vulnerabilities in government systems, the price of digital transparency, decades in prison for federal hacker

,