Arion Kurtaj, 18, embarked on a solo cybercrime spree in September 2022 while on police bail for earlier offences. He targeted Revolut, accessing around 5,000 Revolut customers' information, and then Uber two days later, causing nearly $3 million of damage to Uber, prosecutors said. Revolut declined to comment.