An Arizona man has admitted to hacking a Sony Pictures website and making off with personal information for thousands of individuals as part of a campaign by the LulzSec collective.

Raynaldo Rivera, who was 20 years old when he was arrested in August, made the admission in a plea agreement recently filed in Los Angeles Federal Court. He said he used a third-party service to mask his IP address and then flooded the Sony Pictures website with commands that exploited security vulnerabilities in the underlying servers. The May 2011 SQL-injection attack returned confidential information on thousands of account holders and resulted in more than $605,000 worth of losses.

Rivera, who went by the nicknames neuron, royal, and wildicv, then turned the data over to fellow LulzSec members who posted it online. Rivera's cohorts included a variety of other LulzSec members, including Sabu, Topiary, and Kayla. Sabu and Topiary were later unmasked as Hector Monsegur and Jake Davis and have both admitted to carrying out hacking crimes. UK Police said recently that they arrested two men for offenses conducted by the "Kayla" online identity.

Rivera has agreed to pay restitution to the victims of his crime. He also faces a maximum sentence of five years in prison, a fine of at least $250,000, and a special assessment of $100.