NEW YORK (AP) ― The shadowy underworld of Internet hackers was rocked Tuesday by news that one of the world’s most-wanted and most-feared computer vandals has been an FBI informant for months and helped authorities build a case against five people they say were comrades.

The FBI said it captured the legendary hacker known as Sabu last June and he turned out to be Hector Xavier Monsegur, a 28-year-old self-taught, unemployed computer programmer with no college education, living on welfare in public housing in New York.

His exploits made him a hero to some in cyberspace until he made a rookie mistake ― he posted something online without cloaking his IP address, or computer identity ― and someone tipped off the FBI.

Soon after his arrest, he pleaded guilty and began spilling secrets, leading to charges Tuesday against five people in Europe and the U.S., including a Chicago man who boasted that he’d snared the personal data of a former U.S. vice president and one-time CIA director, and preventing more than 300 attacks along the way, authorities said.

Law enforcement officials said it marked the first time core members of the loosely organized worldwide hacking group Anonymous have been identified and charged in the U.S.

Investigators said Monsegur and the other defendants were associated with the group and some were also part of the elite spinoff organization that Monsegur formed last May, Lulz Security or LulzSec. “Lulz” is Internet slang for “laughs” or “amusement.”

Monsegur and the other defendants were accused in court papers of hacking into corporations and government agencies around the world, including the U.S. Senate, filching confidential information, defacing websites and temporarily putting victims out of business. Authorities said their crimes affected more than 1 million people.

Prosecutors said that among other things, the hackers, with Monsegur as their ringleader, disrupted websites belonging to Visa, MasterCard and PayPal in 2010 and 2011 because the companies refused to accept donations to Wikileaks, the organization that spilled a trove of U.S. military and diplomatic secrets.

Also, prosecutors said, Monsegur and the others attacked a PBS website last May and planted a false story that slain rapper Tupac Shakur was alive in New Zealand. Investigators said it was retaliation for what the hackers perceived to be unfavorable news coverage of Wikileaks on the PBS program “Frontline.”

But it was the arrest of Monsegur that sent shockwaves through the Anonymous movement, in which many described him as a leader and one of the collective’s most skilled hackers.

Some Anonymous members put on a brave face.

“Anonymous is a hydra, cut off one head and we grow two back,” read one defiant message posted to Twitter.

But the atmosphere in one of the group’s chat rooms had an edge of panic. One Anonymous supporter discussed cleaning the group’s hard drive. Another warned that if Sabu is cooperating, then “we are all going to have the FBI at are (sic) door.”

A Twitter account associated with Monsegur has some 45,000 followers and regularly spouts expletive-filled anti-government messages. His last tweet on Monday was in German and described the federal government as being run by “cowards.” It was apparently aimed at concealing his role as an informant.

“Don’t give in to these people,” the message read. “Fight back. Stay strong.”

Monsegur pleaded guilty in August to charges that included conspiracy to commit hacking, admitting he obtained dozens of credit card numbers online and gave them to others or used them to pay his bills. His lawyer, Philip L. Weinstein, declined to comment Tuesday.

His deal with prosecutors requires his full cooperation and testimony at any trial. In return, he gets leniency from a potential prison sentence of more than 120 years. He is free on $50,000 bail.

Also charged with conspiracy to commit computer hacking were Ryan Ackroyd, 25, of Doncaster, England; Jake Davis, 19, of Lerwick, Scotland; Darren Martyn, 25, of Galway, Ireland; Donncha O’Cearrbhail, 19, of Birr, Ireland; and Jeremy Hammond, 27, of Chicago.

Also, an unidentified 17-year-old Londoner was charged separately Tuesday by British police. Three of the British suspects ― Ackroyd, Davis and the 17-year-old ― were arrested last year as part of the trans-Atlantic investigation into LulzSec. Ackroyd was rearrested Tuesday. Davis, the 17-year-old and a fourth British LulzSec suspect, Ryan Cleary, 20, are currently free on bail.

Cleary’s lawyer, Karen Todner, told the Associated Press she had no information about the indictment but said that “it wouldn’t be surprising if one of the hackers was an FBI informant.”

Davis’ lawyer, Adel Buckingham, declined to comment. Contact information for the other European defendants’ lawyers could not immediately be located Tuesday.

Hammond, who was arrested Monday, appeared before a federal judge in Chicago and was ordered transferred to New York. Hammond was charged with crimes related to the hacking in December of Strategic Forecasting Inc., a global intelligence firm in Austin, Texas, that affected up to 860,000 victims, court papers said.

The government said Hammond conspired to hack into computer systems used by Stratfor, a private firm that provides governments and others with independent geopolitical analysis.

It said he and co-conspirators stole credit card information for approximately 60,000 credit card users and used some of the stolen data to make more than $700,000 in unauthorized charges.

Defense attorney Jim Fennerty described Hammond as compassionate, saying he had rallied against plans to hold the 2016 Olympics in Chicago because he felt it would hurt low-income people and had protested against neo-Nazi groups.