What Happened to Sohaib and Muneeb Akhter Government Database Wipe Incident?

The 'Twin Brothers Database Wipe' refers to a significant cybersecurity incident orchestrated by Sohaib and Muneeb Akhter, twin brothers with a history of cybercrimes. In February 2025, shortly after being terminated from their positions as federal contractors at Opexus, a company providing software and services to over 45 U.S. federal agencies, the brothers maliciously deleted approximately 96 government databases.

The motivation behind this destructive act was retaliation. Opexus fired the brothers on February 18, 2025, after discovering Sohaib Akhter's prior felony conviction from 2015. Immediately following their termination during an online meeting, the brothers exploited existing access to their employer's systems. While Sohaib's VPN was disconnected, Muneeb retained access and, over the course of nearly an hour, initiated commands to write-protect, delete databases, and destroy logs to cover their tracks. The deleted data included sensitive investigative files, Freedom of Information Act (FOIA) records, and case management data from agencies like the Equal Employment Opportunity Commission (EEOC), Department of Homeland Security (DHS), and the Internal Revenue Service (IRS). Muneeb also stole over 1,800 EEOC files and IRS records containing personal information of at least 450 individuals.

This was not the Akhter brothers' first encounter with the law. In 2015, they were convicted of conspiracy to commit wire fraud and hacking into U.S. State Department systems, among other charges, for which they served prison sentences. Despite these prior convictions, Opexus rehired them, a decision that later drew heavy criticism and led to the company stating that the individuals responsible for their hiring were no longer employed. The incident underscored a critical failure in Opexus's screening and offboarding protocols, allowing a disgruntled former employee to retain access and cause extensive damage.

Key turning points include their initial convictions in 2015, their rehiring as federal contractors, the discovery of Sohaib's felony leading to their termination in February 2025, the subsequent database wipe, and their arrest in December 2025. In May 2026, Sohaib Akhter was convicted by a federal jury in Virginia on charges including conspiracy to commit computer fraud, password trafficking, and possession of a firearm by a prohibited person. He faces up to 21 years in prison, with sentencing scheduled for September 2026. Muneeb Akhter, who admitted to deleting 96 databases in an agreed statement of facts, is now attempting to have the charges against him dismissed. The incident has also led to a class-action lawsuit against Opexus (also known as Ains, LLC d/b/a Casepoint) in March 2026, alleging failure to prevent the data breach. The broader consequences include significant data loss for federal agencies, substantial recovery efforts, and a renewed focus on insider threat management and robust offboarding procedures within government contracting.