What Happened to Muneeb and Sohaib Akhter Firing and Database Deletion Incident?
Twin brothers Muneeb and Sohaib Akhter were fired from government contractor Opexus on February 18, 2025, during a Microsoft Teams meeting. Minutes after their termination, and while a Teams recording was still active, Muneeb, with Sohaib's encouragement, deleted approximately 96 U.S. government databases and exfiltrated sensitive data. Both brothers, who had prior hacking convictions, were arrested in December 2025, and as of May 2026, Sohaib has been convicted, while Muneeb is attempting to withdraw his guilty plea.
Quick Answer
Muneeb and Sohaib Akhter, twin brothers with a history of hacking, were fired from their roles at Opexus, a government contractor, on February 18, 2025. Immediately following their termination during a Microsoft Teams meeting, and crucially, while the meeting recording was still active, Muneeb proceeded to delete around 96 U.S. government databases and steal sensitive files, with his brother Sohaib observing and assisting. Both were arrested in December 2025. As of May 7, 2026, Sohaib Akhter was convicted on multiple charges, including computer fraud and password trafficking, and is awaiting sentencing. Muneeb Akhter pleaded guilty in April 2026 but has since attempted to withdraw his plea, facing potential decades in prison.
📊Key Facts
📅Complete Timeline11 events
Prior Hacking Convictions
Muneeb and Sohaib Akhter pleaded guilty to conspiracy to commit wire fraud and unauthorized computer access for hacking U.S. State Department systems. Muneeb received 39 months, Sohaib 24 months in prison.
Hired by Opexus
The Akhter brothers were hired by Opexus (formerly AINS), a government contractor providing software to over 45 federal agencies. Opexus's background checks failed to detect their prior convictions.
Termination and Database Deletion
The brothers were fired during a remote Microsoft Teams HR meeting after Opexus discovered Sohaib's felony record. Minutes after the meeting, while a Teams recording was still active, Muneeb, with Sohaib's encouragement, deleted approximately 96 U.S. government databases and exfiltrated sensitive files.
56-Minute Rampage
Starting at 4:56 p.m., Muneeb accessed and deleted a US government database. By 4:58 p.m., he wiped a Department of Homeland Security database. The destruction continued for nearly an hour, during which he also downloaded 1,805 EEOC files and tax information for 450 people.
Firearms Discovery at Sohaib's Home
During a search, a large number of firearms were discovered at Sohaib Akhter's home, which he was prohibited from possessing due to his prior felony conviction.
Continued Credential Abuse
Muneeb Akhter continued to actively use stolen credentials from May 2025 until his arrest, running credential-stuffing attacks on hotels, airlines, and banks, and logging into hundreds of victims' accounts.
Arrest of Both Brothers
Muneeb and Sohaib Akhter were both arrested on multiple charges related to their post-firing actions.
Muneeb's Initial Guilty Plea
Muneeb Akhter signed a plea deal, admitting to the main charges in the indictment.
Sohaib's Conviction by Jury
A federal jury in Alexandria, Virginia, convicted Sohaib Akhter on three counts: conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person.
Muneeb Attempts to Withdraw Plea
Muneeb Akhter filed handwritten letters from jail seeking to withdraw his guilty plea, arguing his innocence on one count. He faces potential penalties up to 45 years if his plea is set aside.
Sohaib's Sentencing Scheduled
Sohaib Akhter is scheduled for sentencing on September 9, 2026, facing a maximum of 21 years in prison.
🔍Deep Dive Analysis
The 'Fired Hacker Twins Teams Recording Incident' refers to the dramatic events surrounding the termination of Muneeb and Sohaib Akhter, twin brothers employed by Opexus (formerly AINS), a contractor providing software to over 45 federal agencies. On February 18, 2025, the brothers were fired during a remote Microsoft Teams HR meeting after Opexus discovered Sohaib's prior felony conviction from 2015 for hacking U.S. State Department systems.
Crucially, the offboarding process was flawed, as Muneeb's access remained active, and the Teams recording of their termination meeting was reportedly left running, inadvertently capturing their subsequent criminal actions. Within minutes of the meeting's conclusion, Muneeb Akhter began a digital assault, deleting approximately 96 U.S. government databases, including those belonging to the Department of Homeland Security, Equal Employment Opportunity Commission (EEOC), and the IRS. He also downloaded 1,805 EEOC files and federal tax information for at least 450 individuals. Sohaib observed and encouraged Muneeb during this rampage, even querying an AI tool on how to clear SQL server logs and Windows event logs to destroy evidence.
The brothers' actions were not their first encounter with the law. In 2015, they had both pleaded guilty to conspiracy to commit wire fraud and unauthorized computer access, with Muneeb serving 39 months and Sohaib 24 months in prison. Opexus's standard background checks, covering roughly seven years, failed to uncover these decade-old convictions. The company later admitted that 'additional diligence should have been applied' and that the individuals responsible for hiring the twins are no longer with the company.
Both Muneeb and Sohaib Akhter were arrested on December 3, 2025. The case proceeded swiftly through federal court. On May 7, 2026, a federal jury in Alexandria, Virginia, convicted Sohaib Akhter on three counts: conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person. He faces a maximum of 21 years in prison, with sentencing scheduled for September 9, 2026. Muneeb Akhter initially pleaded guilty to major charges on April 15, 2026, but has since filed handwritten letters from jail attempting to withdraw his plea, arguing his innocence on certain counts. If his plea is set aside and he is convicted at trial, he faces potential penalties up to 45 years. The incident has highlighted critical vulnerabilities in offboarding procedures and insider threat management for government contractors.
What If...?
Explore alternate histories. What if Muneeb and Sohaib Akhter Firing and Database Deletion Incident made different choices?