"The Santa Barbara Police Department... That’s where Noah wanted to work when he grew up. For another school assignment, Noah says he wants to be a lawyer because 'I think it gives you chance to make life a lot more fair.'"
- King Bob's mother in his Statements of Support [Provided Photo Above]
- King Bob's mother in his Statements of Support [Provided Photo Above]
Introduction
Good Evening and Merry Christmas to the fine people of Leaked.cx. Today I bring to you a full, detailed account of Noah Urban's (aka King Bob) legal battle with the feds, arrest, and trial. Some of you may remember that some months ago I published a small dump of court documents pertaining to his cases (3:23-cr-00180 and 3:23-cr-00070) in Florida Middle District Court. Well, since then several updates have emerged and I have successfully convinced a paralegal friend of mine to use his law firm's PACER account to get a lot more.So what is more to even talk about with King Bob? Retard who sold music and got caught, right? Wrong. It was only a couple weeks ago that his appeal was denied. Plus,
- Did you know King Bob was involved in a criminal conspiracy prosecuted by the DOJ?
- Did you know King Bob is probably related to extorting Riot Games for the League of Legends source code?
- Did you know that King Bob had multiple accomplices?
- Did you know King Bob had 180 victims?
- Did you know King Bob dropped a "6-7" reference in court?
- Did you know King Bob was recognized by his local police department for bravery?
- Did you know the FBI used a cat profile photo to catch him?
For those of you who are not familiar, the US Government's antiquated PACER case lookup system charges per page, so most outlets doing "reporting" typically never bother to go beyond downloading the verdict. I have acquired the full sentencing transcripts, warrants, exhibits, and more, for public informational purposes, at the standard cost of $0.10 per page. I'm told all these documents have also been mirrored on other PACER sites now that they've been retrieved.
If you're curious, I'm planning on putting together a full dump of both of King Bob's cases. My one exception is that I will not be publishing the full letters of support sent in to the court by King Bob's family, nor his mother and father's testimony. I'll describe some of these things later, and legally there is nothing stopping anyone from putting these up. But many of these documents contain sensitive personal information for his family and I don't feel comfortable publishing them in full. Call me gay and retarded in the comments, idc. Besides this, I'll probably put these up in the next couple days once I find a file host that lasts longer than 1 week.
The Indictment
What exactly did King Bob do to get arrested? This is actually a surprisingly complex question, because he has two active cases:First, he has a case that began in Florida in 2023 (3:23-cr-00180). This case only prosecutes King Bob, and primarily relates to his (solo) actions stealing cryptocurrency from people via SIM swapping and social engineering. The concrete accusations here are nine counts of wire fraud, and five counts of identity theft:
- King Bob stole 182 ETH from "Victim 1"
- King Bob stole 1.39 BTC from "Victim 2"
- King Bob stole 2.1 BTC from "Victim 3"
- King Bob stole 82.8 ETH from "Victim 4"
- King Bob stole 219 ETH from "Victim 5"
The feds count each "login" as a separate count of wire fraud and identity theft even though each theft is obviously one action (lmao). Basically he SIM swapped his way into taking a lot of money from people. There are more than five victims, later on they name 60 and estimate a total of 180+, but these are the (presumably) largest five used to secure a search warrant and indictment.
Secondly, he has a case that actually began in California (under 2:24-CR-00595-JWH), and was transferred to Florida for a consolidation in sentencing (receiving a new number 3:25-cr-00070). This case is basically a group prosecution of King Bob and multiple accomplices who worked together to target companies based in California.
A brief aside: What the fuck is this California Case?
So this California Case is actually part of a larger scheme King Bob was a part of, related to the "Scattered Spider" shit boomer news outlets won't shut the fuck up about because they still can't understand cybercrime. Here's his cameo in the DoJ Press Release: https://www.justice.gov/usao-cdca/p...cheme-targeted-victim-companies-phishing-text.Essentially, a group of SIM swappers including King Bob hacked a bunch of video game companies and people's account to steal 11, yes eleven, million dollars. A total of 12 "victim companies" are listed, anonymously, but we can guess who they are (also, later on King Bob's defense attorney straight up gives away AT&T and Coinbase as two of them). The funniest revelation here is that KingBob and the other people working with him weren't even using VPNs for their phishing ops (lol).
The prosecution in California did their best to keep all these victimized companies anonymous, but the biggest one is a "company with offices in Los Angeles County, within the Central District of California, that provided interactive entertainment products and software," and the timeline listed matches up perfectly with Riot Games getting extorted [https://www.axios.com/2023/01/24/riot-games-league-of-legends-source-code-cyberattack?]. Also, at the end of King Bob's most recent appeal, I did catch this:
So yeah King Bob probably was involved with extorting the League of Legends source code, and for some reason, Riot games really wants to keep that under wraps. Probably embarrassing to admit an 18 year old SIM swapper compromised your entire company. Eat shit Krebsonsecurity comment sections.
Anyway, the rest of this post will focus on the first case, because quite frankly, the interesting details about the second are all in the bullets above. Also, this case seems to mostly center on one "AHMED HOSSAM ELDIN ELBADAWY" aka "AD," who I have never heard of in my life.
The Arraignment
As far as I know, I am the first person to detail King Bob's arraignment hearing (happened on January 19th, 2025) and the new details regarding his case found within, since no one before me has apparently purchased these docs from PACER. Let's start with a banger:Anyway, this opens with the prosecutor explaining SIM swapping to an old as shit judge. It continues for a bit, and here are the key interesting details that rewrite what we know about the case. Many of you have seen the arrest video of King Bob. But the prosecutor reveals they actually talked to him on March 1st, right after the search warrant was executed (This makes sense, since the "arrest" video is dated January 9th, 2024, and so is therefore much more likely to be a transfer of some kind). But to give a brief timeline:
- This is important because there was actually a meeting between King Bob and feds in Oregon soon after his arrest, in May of 2023. In this meeting, the feds tell him basically "stop doing this shit" and "don't touch your crypto wallets."
- But then they catch him red handed taking 10k out of a wallet they're monitoring soon after, because,
- They were in this motherfucker's discord account the entire time, and in that, King Bob admits to destroying evidence.
Relevant quotes from the transcript:- "I talked to a fed attorney today. They say if I don't get charged soon, there's a good chance I beat the case. You have no idea how -- expletive, blank -- I would be if I didn't initiate nuke mode."
Prosecutor: I don't really know what "nuke mode" means, but he was talking to his other co-conspirators. And then afterwards he sent some additional information to the co-conspirators specifically saying,
"The FBI has" -- "has the encrypted VeraCrypt. And, "I'm the only one" -- and he also stated, "I'm the only one who can unlock it."
Prosecutor: And this was actually untrue. The FBI was actually able to unlock it. He also discussed to his co-conspirators a, quote/unquote, plea deal that he claimed he was offered, which that never happened.
- "I talked to a fed attorney today. They say if I don't get charged soon, there's a good chance I beat the case. You have no idea how -- expletive, blank -- I would be if I didn't initiate nuke mode."
This is fucking insane, because the prosecution admits "it was a matter of sheer luck that the FBI was actually able to locate him." The fuck? Turns out King Bob was staying at various different Airbnb's, constantly moving from one location to the next. And the feds weren't sure where he was. But how did they locate him?
Basically, they tracked IPs of "King Bob" and related aliases across many locations, and then realized they were all Airbnb's with the same profile photo. This ended up being a costly mistake for Mr. Urban, who, otherwise, might have actually continued to evade the feds for a while longer. Probably not, but maybe. In any event, here is some free advice:
---=== LEAKED.CX AND PANDABET SPONSORED 100% LEGIT OPSEC TIP ===---
DO NOT BOOK AIRBNBS AND CONTINUE TO DO CYBERCRIME WITH THE SAME CAT PROFILE PHOTO THAT THE FBI SAW WHILE EXECUTING THE SEARCH WARRANT AGAINST YOU JUST A FEW MONTHS PRIOR
Continuing on, you might have a question: Why would King Bob benefit from listening to the feds at this point? Well, let's put this in context. You're King Bob: the feds have already visited your home in March and they spoke to you several times in May 2023. At this point, you have to know they're onto you. And then they find you Airbnb hopping on an alias, and paying for it with 10k in bitcoin (that they know you stole) and they specifically asked you not to touch. What does that look like to them?
A flight risk! And that's how you get a judge to summarize like this:
... And your detainment is now approved. It's more likely that he would have gotten to spend the ~2 years in pretrial hearings not in jail, but in the comfort of the home of his mother or father had he not done this. And further, it's very likely the judge's ultimate sentence, and prosecution's recommendation, would have been lower (expert foreshadowing).
There are other details in here, specifically a testimony from both of his parents mainly regarding their ability to watch him if he is granted release in pretrial. They aren't particularly interesting.
That One Hearing Where the Judge Gets Hacked
So obviously I'm going to jump around a bit (spoiler alert: most court documents are fucking boring), and so here we find ourselves 10 days later on January 29th, 2025. Something has happened in the court:Someone hacks the magistrate judge's email, and it appears the FBI believes it was one of King Bob's accomplices, likely from the California case we talked about above. "Hack" is probably a generous term here, my bet is an 80-year old getting credential stuffed ummmph I'm sooo full of credentials, but regardless, a bunch of sensitive evidence and sealed documents got stolen. Whoops.
It's not totally clear what those could be; the only sealed documents in this case I could find itemized mostly pertained to King Bob's health and old school records. It is possible that the sealed indictment (still sealed btw, I checked) had additional details as to whether or not King Bob was cooperating, and that seems to be what the judge is implying. Or maybe some additional details as to how they located King Bob in the first place. But given that these retards weren't even using VPNs to hit targets and were posting VODs on YouTube of gambling with egirls... did you really think that knowing the FBIs tactics was going to be the key to your opsec bro?
Whoever did that is clearly following this case neurotically because it happened before the prior transcript was published, so if by some chance they read this post, I want to give them another piece of free advice:
---=== LEAKED.CX AND PANDABET SPONSORED 100% LEGIT OPSEC TIP ===---
BEFORE YOU GO TO THE EXTENT OF HACKING A FEDERAL JUDGE, MAYBE TRY MULLVAD AND DIGDEEPER.NEOCITIES.ORG FIRST, BUT ENJOY KING BOB'S ELEMENTARY SCHOOL REPORT CARDS AS A CONSOLATION PRIZE
Anyway, this one is really weird because the judge and prosecutor proceed to spend the rest of it talking about Disney cruises. No I am not joking.
The Plea Deal
So King Bob and his defense attorney essentially acquiesce to a plea deal almost immediately. It doesn't look like they ever had any intention of going to trial given how good the FBI got him dead to rights. The exact negotiations aren't public, but the main details of the plea they agreed to in April are basically:- King Bob has to make 13.4 million dollars in restitution payments to victims.
- All of King Bob's assets in crypto found on the laptop (and phone? unclear) are seized.
- Technically, King Bob only pled guilty to (2) counts of wire fraud and (1) count of identity theft.
- King Bob also pled to Count 1 in the California case, having the rest dismissed.
At current values, this is $4,265,311 in crypto and cash. I don't know what these watches are (yes, I looked, no, there is no photos of them). And no, there are no mentions of his song collection or any mp3's in here. Me personally, if I was sitting on 4.3mil I would probably have left the country instead of bragging on discord, but what do I know I'm just a fat fucking unlovable chud.
You also might notice that the crypto assets listed are substantially lower than the restitution amount. Well, let's see if that gets explained in the...
The Sentencing [King Bob's Defense]
So King Bob accepts the plea deal, and so technically the case never goes to trial. In one sense this is disappointing for us, because it means that the prosecution never has to open discovery (i.e., we will probably never see or get actual images or chat logs the FBI was logging on his account). In regards to music, if there ever was a notepad or anything where he detailed his vault, we won't get that either.Anyway, back to the issue of the missing 9 million dollars. The defense has an explanation:
Yep, turns out King Bob blew generational wealth on Stake.com. Another interesting detail raised by the defense attorney here is that the government isn't necessarily letting King Bob pay the 13 million dollars in restitution with the stolen funds. They're just... sort of keeping it as forfeiture? Again pulling from the transcript:
With all this in mind, the defense essentially paints a picture of King Bob being an irresponsible teenager groomed into crime by the older co-defendants in the California case. Funnily enough they do specifically ask for gambling addiction treatment to be part of his release conditions. And so finally, the defense attorney asks the judge for ask for a lighter sentence of five years, and King Bob concludes with a personal apology:
It's also worth noting that King Bob received "Letters of Support" from a variety of people urging the judge to issue a light sentence. This included his parents and his extended family. It feels wrong to excerpt these, and so I won't, beside the head of this post.
Most interestingly though, the local police department also apparently commended him for saving his family's life and avoiding a multi car pileup at the age of ten?
The Sentencing [The Government's Side]
Now, the government gets to step up and make their case for a longer duration of incarceration. They start by saying "all five million" of King Bob's assets will be sold and distributed in some equal manner to the victims (they overestimate its value because the price of crypto has dropped since then, so I hope they sold, lmao). Here we get a few new bits of information, mainly that the King Bob was so prolific even the FBI doesn't have a firm idea of how many true victims there are:And also, the prosecution reiterates how lucky they got with the search warrant and his computer staying on:
The government concludes by asking for 8.5 years. But then the judge, independently, brings up something else:
The Victims
By now many of you are probably thinking "wow you're sure being harsh on the guy." And yeah at one point I thought so too. For the big companies and the artists he hacked, sure, quite frankly, fuck them. Who cares. But it's worth remembering that there are a lot of individual victims here, victims who were targeted specifically because of their vulnerability. What's up with them?Well, inside the sentencing transcript, there's a moment where the judge reviews the "Victim Impact Statements." I'll let the transcripts talk here. And if you think I'm being mean to King Bob, give these a skim, as the judge does in his sentencing:
THE COURT: Then we have R.B. on page 65 and 66 of -- and 67 of document 20. "When I realized the substantial impact to a fund I had set up in order to give in vitro fertilization treatments" -- R.B. also said he experienced psychological damage resulting in behavioral changes not limited to the following: fear of investing, loss of security, depression, public embarrassment, difficulty at work, overspending, and an opportunity cost due to fear of my investments...
...
THE COURT: Then we have R.B.: "Unfortunately, we have to pay for IVF to make our dreams come true, and the additional increased medical costs and procedures not covered by insurance can cost well into the six-figure range, taking years to complete after financing has been secured.
"In addition to the costs, I have experienced psychological damages resulting in behavioral changes," and I had mentioned what those were before.
...
THE COURT: Then we have R.B.: "Unfortunately, we have to pay for IVF to make our dreams come true, and the additional increased medical costs and procedures not covered by insurance can cost well into the six-figure range, taking years to complete after financing has been secured.
"In addition to the costs, I have experienced psychological damages resulting in behavioral changes," and I had mentioned what those were before.
THE COURT: Then if you would go to page 30 of the 107-page document 20, and let me just see if I can -- this is from a B.D.: "The dreams and aspirations my wife and I held for 21 years in providing for our children has been shattered. The emotional well-being and educational opportunities for my 17-year-old son and 14-year-old daughter, who has a learning disability, have been severely impacted.
"Despite the adversity and personal health challenges I face due to epilepsy, I remain reflecting the pain and suffering caused. My daughter has a learning difficulty, and she was getting help, but this has stopped. My children's education has been jeopardized. My dad delayed his retirement to make sure my family was going to make it."
THE COURT: Page 60 of the 107, J.G., he checked off made a substantial change to his employment, and this is what he wrote: "He stole a major portion of my retirement account. I was" 72 year old -- "72 years old when the crime occurred. As a result I needed to take a job as a courier until I was no longer able to withstand the physical rigors of the job.
"I worked from January of '23 to March of '25. I sustained several falls and was unable to continue to work. I will be having both knees replaced later this year. Needless to say, the crime put me and my family through some difficult times, both financially and emotionally."
THE COURT: And the rest, I'm ready to tell you what I have found in the victim impact statements, but I'll listen to the government first. And I have this one victim that's present. I believe he did file a victim's impact statement. This is the man who's a retired firefighter?
MR. CANNIZZARO: That's a -- that's a different victim, Your Honor.
THE COURT: Different victim?
R. CANNIZZARO: Yes, Your Honor.
THE COURT: Who is the victim that's here? Could you raise your hand?
UNIDENTIFIED PERSON: (Raised hand.)
THE COURT: In the back. Okay.
Which is his victim impact statement?
MR. CANNIZZARO: It was Victim 22.
...
THE COURT: This is Victim R.K.: "I'm stuck babysitting a 20-year-old car that won't pass emissions. I don't like writing this because it requires me reliving the nightmare. I can feel my heart speeding up and pounding in my chest right now, and I'm actually experiencing shortness of breath. Kraken forced me to work hard to prove my identity before they would allow me access to my own accounts. That took three days."I was in a panic, frantic to find out how this happened. For weeks I woke up every night in cold sweats. I can't overstate the emotional impact that this my personal life has had on my peace of mind."
...
Here's the one that I was talking about before that I thought this was the victim that was here. R.K., a 68-year-old retired firefighter, and this is the man that was talking about his car before.
"I was at wit's end, frantically trying to do whatever I could to prevent further intrusion into my finances and my life. I became very paranoid, and I still am to some extent. I even questioned my next-door neighbor's teenage son to see if he might have been the one involved. His parents took it very personally. They have never forgiven me. It ended my longtime friendship with them, and the loss continues to hurt me today."
MR. CANNIZZARO: That's a -- that's a different victim, Your Honor.
THE COURT: Different victim?
R. CANNIZZARO: Yes, Your Honor.
THE COURT: Who is the victim that's here? Could you raise your hand?
UNIDENTIFIED PERSON: (Raised hand.)
THE COURT: In the back. Okay.
Which is his victim impact statement?
MR. CANNIZZARO: It was Victim 22.
...
THE COURT: This is Victim R.K.: "I'm stuck babysitting a 20-year-old car that won't pass emissions. I don't like writing this because it requires me reliving the nightmare. I can feel my heart speeding up and pounding in my chest right now, and I'm actually experiencing shortness of breath. Kraken forced me to work hard to prove my identity before they would allow me access to my own accounts. That took three days."I was in a panic, frantic to find out how this happened. For weeks I woke up every night in cold sweats. I can't overstate the emotional impact that this my personal life has had on my peace of mind."
...
Here's the one that I was talking about before that I thought this was the victim that was here. R.K., a 68-year-old retired firefighter, and this is the man that was talking about his car before.
"I was at wit's end, frantically trying to do whatever I could to prevent further intrusion into my finances and my life. I became very paranoid, and I still am to some extent. I even questioned my next-door neighbor's teenage son to see if he might have been the one involved. His parents took it very personally. They have never forgiven me. It ended my longtime friendship with them, and the loss continues to hurt me today."
And so with all this in mind, the judge gives him ten years. Technically more than the prosecution even asked for and at the upper limit of the sentencing guidelines. Remember earlier when we talked about how retarded it was for King Bob to brag on discord about destroying evidence and not cooperating with the feds?
---=== LEAKED.CX AND PANDABET SPONSORED 100% LEGIT OPSEC TIP ===---
THE FBI WILL REMEMBER YOU LYING TO THEM TO THEIR FACE AND BRAGGING AT THEIR EXPENSE IN YOUR DISCORD SERVER
The defense objects, saying The Court did not consider King Bob's young age, and basically says they plan to appeal. Then they request the judge advise King Bob's sentence be carried out at "Coleman," a low security federal prison in Florida. So for the foreseeable future, King Bob will be here: [https://www.bop.gov/locations/institutions/col/].
The Appeal, and The Future
King Bob did appeal this decision, technically both cases, to the federal circuit. Both have been dismissed, and they don't seem to have any super interesting. There are still three transcripts from the case itself are sealed until 12/29/2025, and I could wait for these but I am also very impatient. So in th next few days I'll update this post if they have anything interesting.You might have realized by now that the FBI, prosecution, defense, nobody ever talked about the King Bob we knew, King Bob the music leaker. Did he get off for that? Did everyone just forget?
Well, no. It looks like someone remembered.
Last edited: