BANGOR, Maine: A Bradley man was sentenced today in U.S. District Court in Bangor for conspiracy to commit bank fraud and aggravated identity theft.
U.S. District Judge John A. Woodcock, Jr. sentenced Darren Deorsey, 51, to 13 months of imprisonment, followed by 5 years of supervised release. He was also ordered to pay $16,900 in restitution. Deorsey pleaded guilty on November 6, 2025.
According to court records, between July and October 2024, Deorsey conspired with others to fraudulently obtain money by entering banks, impersonating legitimate bank account holders, and using fictitious identification cards to gain access to their bank accounts and withdraw funds. Through fraud, Deorsey obtained a total of $16,900 from customer accounts, including a $5,000 cash advance on a home equity line of credit in the name of an account holder.
The FBI investigated the case with assistance from…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.