O’Connor has denied wrongdoing in previous interviews. No lawyers defending him could be located immediately.
The Madrid-based National Court handles extradition requests in Spain. A court spokesperson said Judge Santiago Pedraz considered the charges against O’Connor grave enough to warrant keeping him in custody and preventing him from trying to flee during the extradition process.
The spokesperson was not authorized to be named in media reports.
Extradition requests can take months to resolve and involve both a judicial review and the Spanish Cabinet’s approval.
The FBI informed Spanish authorities about O’Connor’s alleged involvement in last year’s hack, the National Police said in a press release. It said Spanish and U.S. agents took part in his arrest and search of the suspect’s residence, confiscating two computers and a mobile phone.
The U.S. criminal complaint charged O’Connor — who went by the online handle PlugWalkJoe — with crimes including cyberstalking, making extortive and threatening communications and intentionally accessing a computer without authorization.
During the high-profile security breach a year ago, fake tweets were sent from the accounts of Barack Obama, Joe Biden, Mike Bloomberg and a number of tech billionaires including Amazon’s then-CEO Jeff Bezos, Microsoft co-founder Bill Gates and Tesla CEO Elon Musk.
The bogus tweets asked followers of high-profile accounts to send Bitcoin payments. O’Connor is at least the fourth suspect charged in connection with the hack.
Spain’s National Police said Thursday that O’Connor was permanently residing in Marbella, another southern coastal city popular with foreign residents and that he had been on their radar at least since April 2020 as part of an alleged criminal group committing fraud online.