Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Daniel Christian Hulea, a Romanian national, was sentenced to 20 years in federal prison on December 19, 2024, for his role in NetWalker ransomware attacks. He pleaded guilty to computer fraud conspiracy and wire fraud conspiracy, admitted helping obtain approximately 1,595 bitcoin in ransom payments, and was ordered to forfeit $21.5 million plus interests in a Bali resort venture and to pay $14,991,580.01 in restitution.
Who is Daniel Christian Hulea?
Hulea, 30, was identified by the U.S. Department of Justice as a resident of Jucu de Mijloc, Cluj, Romania. He pleaded guilty in the Middle District of Florida on June 20, 2024. The DOJ describes his conduct as participation in a conspiracy that used NetWalker ransomware; news coverage commonly refers to him as a NetWalker affiliate. The sentencing announcement is available from the U.S. Department of Justice.
Why did Daniel Hulea get 20 years in prison?
Under his plea agreement, Hulea admitted using NetWalker with a co-conspirator to obtain approximately 1,595 bitcoin in ransom payments. The DOJ valued those payments at approximately $21.5 million at the time they were made. That historical valuation is not a current calculation of bitcoin’s market price.
The court imposed a 20-year federal prison sentence after the guilty pleas to computer fraud conspiracy and wire fraud conspiracy. The DOJ release reports the sentence and admissions; it is not a substitute for the complete plea agreement or judgment.
#1 Best Overall
How much did the NetWalker affiliate have to pay back?
The court entered two different financial orders. They should not be added together or treated as the same remedy.
| Order | Amount or property | What it represents |
|---|---|---|
| Forfeiture | $21,500,000 | Criminal proceeds subject to forfeiture, plus Hulea’s interests in an Indonesian limited liability company and an associated luxury resort under construction in Bali |
| Restitution | $14,991,580.01 | Compensation ordered for victims |
The DOJ says the Bali business venture was financed with proceeds from the attacks. The forfeiture amount reflects the government’s order against proceeds and related assets, while restitution is a separate victim-compensation order.
How was the Romanian NetWalker affiliate extradited to the United States?
- Romanian law enforcement arrested Hulea in Cluj on July 11, 2023, following a U.S. request.
- Romania and the United States processed the case under their extradition treaty.
- After extradition, the U.S. Marshals Service transported Hulea to the United States for prosecution in the Middle District of Florida.
The DOJ’s Office of International Affairs assisted with the arrest and extradition, while the FBI Tampa Field Office conducted the investigation.
Who did NetWalker target?
The DOJ says NetWalker was used against hundreds of victims worldwide. The affected sectors included companies, municipalities, hospitals, law-enforcement agencies, emergency services, school districts, colleges and universities. The operators specifically targeted healthcare organizations during the COVID-19 pandemic, when disruption could endanger already strained services.
Rank #3
Who else was sentenced for NetWalker ransomware?
SecurityWeek reported that Hulea was the second person to receive a 20-year U.S. sentence in a NetWalker case. The earlier defendant was Canadian national Sebastien Vachon-Desjardins, whom the DOJ says was sentenced on October 4, 2022, to 20 years in prison and ordered to forfeit $21.5 million. His separate Canadian proceedings should not be confused with the U.S. sentence. See the DOJ announcement on Vachon-Desjardins.
For broader background, SecurityWeek says NetWalker emerged in 2019 and was disrupted in 2021 after authorities seized dark-web sites. Its report also notes that the University of California, San Francisco paid more than $1 million after an attack. Those details are secondary-source context rather than part of Hulea’s sentencing order. Read SecurityWeek’s December 20, 2024 report.
Quick Recap
Best Value
What the sentence establishes—and what it does not
- It establishes a 20-year federal sentence following Hulea’s guilty pleas.
- It records admissions concerning approximately 1,595 bitcoin and a DOJ valuation of about $21.5 million when the payments were made.
- It includes both a $21.5 million forfeiture order and $14,991,580.01 in restitution, plus specified Indonesian assets.
- It documents a cross-border investigation, arrest in Romania and extradition to the United States.
- The DOJ release, archived and updated February 6, 2025, does not by itself provide a later appeal or custody-status update.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
