Using computer to commit a crime in darkness.

CLEVELAND, OH — A former software developer who secretly planted a “kill switch” inside his employer’s network—crippling systems and locking out thousands of users worldwide—was sentenced Wednesday to four years in federal prison.

Davis Lu, 55, a Chinese national legally residing in Houston, was convicted earlier this year of causing intentional damage to protected computers after he unleashed malicious code on his former employer, a Beachwood, Ohio-based company. The attack followed a corporate restructuring that slashed Lu’s access and responsibilities, triggering a campaign of digital sabotage.

Federal prosecutors revealed that Lu spent months building a trap inside the company’s systems. His code created infinite loops to crash servers, wiped employee profile files, and included a “kill switch” that locked out all users if his own credentials were ever disabled. That exact scenario played out on Sept. 9, 2019, when Lu was placed on leave and ordered to return his company-issued laptop—instantly activating the hidden code and wreaking havoc across the company’s global operations.

The kill switch, coded under the internal name “IsDLEnabledinAD” — a reference to “Is Davis Lu enabled in Active Directory” — disabled user logins and paralyzed company operations. Prosecutors say the sabotage caused hundreds of thousands of dollars in damages.

Evidence presented at trial showed Lu had researched how to escalate privileges, conceal malicious processes, and delete files to hamper any recovery efforts. He also deleted encrypted data just before turning in his laptop.

The FBI’s Cleveland Field Office led the investigation, which ended with Lu’s conviction and a sentence that also includes three years of supervised release.

—

Key Points

Software developer Davis Lu sentenced to 4 years for sabotaging his former employer’s computer systems
Lu embedded a kill switch that locked out global users after his credentials were disabled
Attack caused hundreds of thousands in damage and led to widespread system outages

A software engineer’s hidden sabotage code locked down a global network after his demotion, landing him a four-year federal prison term.

Phil Stilton Latest posts

Phil Stilton is the Editor and Publisher of Shore News Network, an independent digital newsroom providing original reporting on New Jersey, national news, government, public policy, public safety, courts, and community affairs.

As founder of the publication, Stilton leads editorial strategy, investigative reporting, and daily newsroom operations while overseeing coverage that reaches millions of readers annually.

With extensive experience covering municipal government, county government, state legislatures, elections, law enforcement, emergency management, and public records, Stilton specializes in translating complex government actions into clear, factual reporting. His work frequently relies on primary source documents, including court filings, legislation, public meeting records, election finance disclosures, government databases, police reports, and Freedom of Information and Open Public Records Act (OPRA) requests. He has reported extensively on local government accountability, taxpayer spending, campaign finance, public corruption investigations, infrastructure, public safety, and the policies affecting New Jersey residents.

Under Stilton's editorial leadership, Shore News Network has grown into one of New Jersey's largest independent digital news organizations, publishing thousands of original news articles each year while providing breaking news coverage, investigative reporting, and analysis across state and local government. The publication's reporting is routinely sourced from official government agencies, public officials, court records, and firsthand documentation, with a commitment to transparency, attribution, corrections when warranted, and clearly distinguishing factual reporting from opinion.

Stilton's journalism follows established newsroom standards emphasizing accuracy, verification, fairness, and accountability. Every effort is made to verify information through official records and multiple reliable sources before publication. His reporting is intended to provide readers with timely, well-documented information that helps them understand the issues affecting their communities, while maintaining editorial independence from political parties, government agencies, advocacy organizations, and commercial interests.

Readers can submit story tips, corrections, public records, or media inquiries through the official Shore News Network website or its verified social media channels. Shore News Network welcomes corrections and updates when new information becomes available as part of its ongoing commitment to accurate and transparent journalism.