The Com, a loosely organized online crime network, has found itself back in the spotlight after a 20-year-old man was convicted in Britain of online blackmailing and abusing underage victims. The case involves 117 girls aged 13 to 17 around the world.
Justin Swaddle, from Leeds, was sentenced to two years in prison on August 10, 2026, after pleading guilty to a series of child sexual abuse offences and blackmail. The sentence was handed down at Leeds Crown Court, according to the UK's National Crime Agency.
See also: Snowflake hacker: Guilty of breaches affecting 100 million people
The Com's action and conviction
The investigation showed that Swaddle used Snapchat, Telegram and Discord to reach out to minors and pressure them into providing personal information. Police arrested him in October 2023 for offences involving possession, creation and distribution of illegal material.
The National Crime Agency began its own investigation in January 2024 and examined data from his phone and computer. Investigators traced hundreds of conversations and established his connection to The Com, a network that has been linked to blackmail, abuse and other forms of cybercrime.
Swaddle pleaded guilty to all charges on July 2. In addition to the two-year prison sentence, he was given a ten-year sexual harm prevention order and required to register with the sex offenders register.
117 victims in international investigation
According to the official statement, the agency identified 117 victims worldwide, all girls aged between 13 and 17. Eight of them were in the UK and had been in direct contact with Swaddle. The remaining cases were identified through international cooperation.
The investigation was supported by agencies from the United States, Canada, Australia, Norway and New Zealand. The cooperation was not limited to data collection, but included contact with victims and protection measures for minors located in different countries.
The case shows how access to public or stolen personal information can be turned into a tool for intimidation. Perpetrators don't need to compromise a large infrastructure to cause serious harm; linking accounts, locating a school or address, and leveraging pressure within private conversations is often enough.
The response of agencies should combine technical investigation and protection of minors. Retaining messages, usernames and timestamps can help authorities link accounts and prevent new victims from being approached, without reproducing the harmful material.
See also: Discord and Meta in the crosshairs of lawsuit over platform design
How cyberbullying works
The Com case highlights the combination of social engineering and blackmail. A conversation on a gaming or social networking platform can be transferred to another service, where the perpetrator gathers more information and tries to isolate the victim from their family or friends.
Cyberbullying with the threat of releasing personal information, photos or conversations can lead a child to silence. For this reason, the response should not be based on blaming the victim. The priority is to immediately report the incident to the platform, preserve the data and contact the relevant authorities.
Parents, educators, and organizations need to be aware that simply changing your password is not enough when an attacker has already stored personal information. They need to review privacy settings, limit public exposure, enable multi-factor authentication, and carefully document each threat.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: Digital Identity: The Invisible Trade That Fuels Cybercrime
The importance of protecting victims
Platforms should treat such reports as high-risk incidents, with special procedures for minors and rapid retention of relevant data. Delay may allow accounts to be deleted or pressure to be transferred to new services.
Swaddle's conviction does not end the case, as the international investigation must continue to identify risks and support victims. The use of digital traces, cooperation between authorities and a rapid response by platforms are crucial to limiting similar incidents.
The online extortion in The Com confirms that cybersecurity is directly linked to the protection of human dignity. Timely reporting, secure management of personal data and avoiding isolation of victims can limit the influence of perpetrators and help authorities act more effectively.
