The Crypto Shawshank Escape: How Inmates Built PCs in a Prison Ceiling to Mine Bitcoin

1. The E-Waste Scavengers of Marion Prison

At the Marion Correctional Institution, a state prison in Marion, Ohio, inmates participated in a community work program called RET3, which disassembled and recycled obsolete state computers and electronics ^[1].

Two inmates—Adam Johnston (serving time for burglary) and Scott Spriggs (convicted of armed robbery)—realized the guards had zero technical knowledge of computer architecture. Over several months, they covertly pocketed high-end motherboards, power supplies, network cards, and hard drives from discarded state machines ^[1].

Working under the dim light of their workshop, they assembled two fully functional, high-performance desktop PCs, complete with dedicated graphics cards and cooling fans ^[2].

2. The Ceiling Crawlspace Server Farm

Smuggling full-sized computer towers through prison security is supposed to be impossible. But Johnston and Spriggs dismantled the PCs into flat cardboard boxes, transported them during janitorial shifts into an administrative office closet, and hauled them up into the false acoustic ceiling crawlspace ^[2].

There, perched on a slab of plywood suspended between metal ventilation ducts, they reassembled both machines. They tapped into the building's electrical conduit for 24/7 free power, plugged Cat5 ethernet cables directly into the state prison's switch, and configured proxy software ^[2].

The computers were hidden on plywood placed across ceiling joists in an area where only maintenance staff were authorized to go.^[2][3]

— Ohio Inspector General Investigation Report (March 2017)

3. 24/7 Mining and Counterfeit Prison Passes

From their ceiling fortress, the two inmates ran a criminal software empire. Using the prison's unmonitored high-speed government internet, they set up Bitcoin mining software to accumulate digital currency on the state's dime ^[3].

They didn't stop at crypto. The inmates hacked into the Ohio Department of Rehabilitation and Correction's internal database, created fake prison security passes for fellow inmates, accessed confidential inmate disciplinary records, and loaded the PCs with torrented movies, VPN tools, and hacking tutorials ^[3].

Whenever they needed to update their software, they accessed the machines remotely using compromised login credentials of a retired employee named 'cc5972' ^[4].

4. The 3:00 AM Bandwidth Alert and the Ceiling Discovery

The operation ran flawlessly for months until the morning of July 3, 2015. A cybersecurity officer in Columbus noticed a security alert: an unknown computer on the Marion prison subnet had exceeded the daily state internet proxy quota of 5 gigabytes ^[4].

IT specialists conducted network port tracing to narrow down the physical wall jack to an administrative closet in the prison's training building. When guards opened the closet, the room was empty. But an investigator noticed an unplugged drop-cable disappearing up into the ceiling ^[4].

Shining a flashlight into the ceiling hatch, guards were stunned to find two hot, humming custom computers running full-blast in the dark ^[5].

5. The Aftermath: Transfer and Security Overhaul

The discovery resulted in a scathing 50-page investigation by Ohio Inspector General Randall Meyer, leading to criminal indictments, disciplinary firings, and the immediate shutdown of the prison computer recycling initiative ^[5].

Johnston and Spriggs were transferred to higher-security facilities, but their feat earned legendary status in cybercrime folklore.

The Marion prison heist remains the ultimate real-world testament to hacker resourcefulness: proving that as long as there is an electrical current and a network cable, human beings will find a way to mine Bitcoin anywhere on Earth.