Overview

• The Justice Department said on Aug. 21 that Davis Lu, 55, was sentenced to four years in prison and three years of supervised release.
• A federal jury in March 2025 convicted Lu of intentionally causing damage to protected computers.
• Court documents describe malicious Java code that spawned infinite threads, deleted coworker profile files, and included a function named IsDLEnabledinAD.
• The kill switch activated on Sept. 9, 2019 when his access was disabled, locking out thousands of users at the Ohio-based company, which multiple outlets identify as Eaton.
• The FBI Cleveland Field Office investigated, prosecutors from DOJ’s CCIPS and the Northern District of Ohio handled the case, and officials said the company suffered losses in the hundreds of thousands of dollars.