Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Former U.S. Department of Energy (DOE) and Nuclear Regulatory Commission (NRC) employee Charles Harvey Eccleston was sentenced to 18 months in prison on April 14, 2016, after pleading guilty to one count of attempted unauthorized access and intentional damage to a protected computer. The January 2015 spear-phishing emails at the center of the case went to roughly 80 DOE employees, but their link was harmless: it had been supplied by an undercover FBI agent.

Who was Charles Harvey Eccleston?

Eccleston had worked for both the NRC and DOE. SecurityWeek reported that his NRC employment ended in 2010 and that he moved to Davao City in the Philippines in 2011. The later phishing operation described in the case targeted DOE employees, not NRC employees. SecurityWeek’s account is the basis for these details.

How did the reported conduct develop?

Offers to sell employee email addresses

In 2013, Eccleston reportedly went to a foreign embassy in Manila and offered to sell more than 5,000 email addresses associated with officials, engineers, and employees of a U.S. government energy agency. SecurityWeek said he asked for $18,800.

Later that year, he reportedly offered an undercover FBI agent 5,000 NRC employee email addresses for $23,000, saying a foreign country could use them to deliver malware to NRC computers. The agent bought 1,200 addresses for $5,000. SecurityWeek reported that subsequent analysis found the addresses were publicly available.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Offer to send spear-phishing emails

In 2014, Eccleston reportedly told another undercover agent that he had 30,000 DOE employee email addresses and offered to create and send spear-phishing messages that would deliver malware. He designed emails advertising nuclear-energy conferences, with links intended to lead to malware, according to SecurityWeek.

What happened to the DOE employees who received the emails?

In January 2015, roughly 80 DOE employees received the emails. The link had been provided by the undercover FBI agent and was harmless, SecurityWeek reported. The account therefore describes an attempted operation, not DOE employees being infected by malware through that link.

What was the sentence and what money was involved?

Philippine authorities detained Eccleston in March 2015; SecurityWeek reported that he was deported to the United States and indicted in May 2015. He pleaded guilty in early February 2016 to one count of attempted unauthorized access and intentional damage to a protected computer. On April 14, 2016, he received an 18-month prison sentence.

The court also ordered $9,000 forfeited, which SecurityWeek described as the total amount paid to him by undercover agents. Separately, an undercover employee had promised $80,000 for sending the spear-phishing emails; the report does not describe that promised amount as money Eccleston received. SecurityWeek’s sentencing report distinguishes the forfeiture from the promised payment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the case account establishes—and what it does not

The reported figures—more than 5,000 addresses offered, 1,200 purchased, a claimed 30,000 DOE addresses, and roughly 80 email recipients—are quantities from this case narrative, not broader statistics about agency email exposure or cyberattacks.

The available account is a 2016 SecurityWeek report rather than a primary court filing or Department of Justice release. It supports the reported plea, sentence, and sequence of events above, but does not establish exact statutory language, docket details, or later procedural history.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.