Overview

• A federal judge in Jacksonville imposed a 120‑month prison term and three years of supervised release, exceeding the eight years prosecutors sought.
• The court ordered more than $13 million in restitution intended to cover victims in the Florida and California cases.
• Prosecutors estimate total victim losses between $9.5 million and $25 million, with roughly $2.9 million in cryptocurrency recovered in a 2023 raid.
• Urban pleaded guilty in April 2025 to wire‑fraud conspiracy, with schemes leveraging SIM‑swapping and SMS/voice phishing that mimicked Okta to breach more than 130 companies including Twilio, LastPass, DoorDash, MailChimp, and Plex.
• A February 2025 court transcript confirms an intrusion into a magistrate judge’s email via a fraudulent password‑change call, exposing a copy of Urban’s sealed indictment while he was in custody.