125 F.4th 354
2d Cir.2025Background
- Guy Cuomo, also known as John Monaco, was convicted in the Northern District of New York for conspiracy to commit computer fraud, accessing a protected computer without authorization, aggravated identity theft, misuse of social security numbers, and conspiracy to misuse social security numbers.
- Cuomo operated Paymerica Corporation and Ameripay Corporation, which performed skip tracing services by deceiving state unemployment systems to obtain debtors' place-of-employment (POE) information using false identities and social security numbers.
- Paymerica employees, under Cuomo’s direction, created fake online accounts, impersonated debtors, and circumvented authentication protocols to retrieve confidential information from state systems.
- The information obtained was sold to third parties for commercial gain, covering data from all 50 states and involving tens of thousands of individuals.
- Cuomo was sentenced to 45 months’ imprisonment and three years’ supervised release. On appeal, he challenged jury instructions, sufficiency of the evidence, and sentencing enhancements.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Violation of CFAA | Sufficient evidence of unauthorized access for financial gain | Public access to website; no gate to block entry | Sufficient evidence; site had code-based gates |
| Jury Instructions (CFAA/SSN Misuse) | Instructions were accurate and legally sufficient | Instructions failed to properly define 'authorization' and intent | Instructions not erroneous; no plain error |
| Aggravated Identity Theft | Predicate felonies and unauthorized use shown | No sufficient evidence of predicate felonies | Evidence ample; convictions affirmed |
| Sentencing Enhancements | Enhancements warranted by role and intent to obtain info | No leadership role; POE info not 'personal information' | No clear error; enhancements affirmed |
Key Cases Cited
- United States v. Valle, 807 F.3d 508 (2d Cir. 2015) (definition of 'authorization' under the CFAA)
- United States v. Morris, 928 F.2d 504 (2d Cir. 1991) (interpretation of 'authorization' in computer fraud statute)
- United States v. Flores, 945 F.3d 687 (2d Cir. 2019) (standard of review for sufficiency of evidence)
- Anderson v. City of Bessemer City, 470 U.S. 564 (1985) (standard for clear error in factual findings)
- United States v. Yermian, 468 U.S. 63 (1984) (definition of 'deceive' in federal fraud context)