
Richard Clayton Wozniak, a 41-year-old resident of Palm Coast’s P Section, was arrested Wednesday on five felony charges following a Florida Department of Law Enforcement investigation that found him to have allegedly carried out a cyber attack on his company’s computer infrastructure in retaliation for the company firing him. The attack crippled some of the company’s functions.
“Dude I think I got my company in a choke hold,” Wozniak, the father of two young children, is alleged to have written in a message to someone after the cyber attack.
The Spice and Tea Exchange, an online and in-store retailer originally founded in St. Augustine and based in Palm Harbor, hired Wozniak as an IT System Administrator in mid-October 2024. (The FDLE refers to it as The Spice and Tea Company.) He was fired last Jan. 14. “Within minutes, the company’s firewall, E-mail, and physical security was infiltrated,” FDLE’s warrant states, resulting “in completed deletion of company data.”
A human resources executive at the company told the FDLE investigator that while Wozniak’s position was being eliminated, he had “displayed very concerning behaviors while employed,” such as having a short fuse. The day of the firing he was working from home. The HR executive called him at noon to let him know he was fired. The conversation lasted just under 10 minutes.
According to the warrant, Wozniak “made several threatening statements prior to terminating the call. For one, [he] had stated ‘your company is not prepared for what is coming your way.’”
Almost as soon as he was fired the company would have disconnected him from its firewall and restricted access. That was to be done while the HR executive was still on the phone with Wozniak. But in what appeared to have been a movie-like race between IT employees, Wozniak was a step ahead of his ex-IT colleague at the Spice and Tea Exchange. He’d logged into the system at the same time that his colleague was racing to restrict access. Wozniak “overtook” him and the entirety of the business’ email access. The company “immediately lost access to the company firewall and emails,” the warrant states. Wozniak removed the firewall and obstructed business “continuity.”
He’d left one of his company laptops at the office. His colleague opened it–there was no expectation of privacy with a company laptop–and noticed that Wozniak’s logon to his Chrome and Gmail accounts was automatic, and that it was syncing his other devices with his work computer, a violation of company policy. Within an hour or so of his firing, his history showed he had searched for “Florida Unemployment” and “Palm Coast Lawyers.”
The colleague also discovered that an email filtering service blocking spam and malware had been removed, requiring 3,800 emails to be manually approved. The company was no longer able to log into its own firewall and eventually learned from the Meraki Sysco Company, which provided the firewall data for the Exchange, that the company was deleted from Meraki’s database. So there were no logs of the attack Wozniak allegedly orchestrated.
FDLE confirmed that the last user to make changes to the account had a username of “r.wozniak.” FDLE also subpoenaed information from Google and was informed by Charter Communications of further data that led to Wozniak’s house on Prince Michael Lane. Circuit Judge Chris France signed a search warrant, which was served on April 25.
Wozniak that day acknowledged his role when he was IT administrator but denied accessing the firewall.
France signed the FDLE warrant for his arrest on July 7. On Wednesday, Wopzniak was driving his Jeep Grand Cherokee on State Road 11 in Flagler County when he was pulled over by a Flagler County Sheriff’s deputy, arrested, and taken to jail, where he was booked and soon released on $25,000 bond.
He faces three charges of computer fraud, a charge of tampering with computer intellectual property and a charge of unlawful use of a two-way communication device. Four of the charges are third-degree felonies, each with a maximum penalty of five years in prison. One of the charges is a second-degree felony, with a 15-year maximum if convicted.