Australian authorities charged Ruben Ian Thomson, 21, and Louis Michael Gaebler, 23, with 14 offences after a joint investigation into the alleged TeamPCP cybercrime syndicate. The Australian Federal Police, the FBI and the Western Australia Police Force allege the men inserted malicious code into legitimate open-source software components, compromising more than 1,000 organizations worldwide, exposing over 500,000 credentials and removing at least 300 gigabytes of data. Thomson also faces an Australian charge involving alleged criminal proceeds worth at least 100,000 Australian dollars, an offence carrying a maximum 20-year prison term. U.S. prosecutors separately indicted Thomson on two federal computer crime charges linked to alleged attacks during spring 2026; each carries a maximum five-year prison term and a fine of up to $250,000 or twice the alleged gain or loss. Authorities say cryptocurrency payments connected to the alleged operation remain under investigation and have not disclosed the assets, currencies or any laundering total seized. Both men appeared before Perth Magistrates Court on Aug. 27, and the allegations have not been tested in court.