Arion Kurtaj, 18, and a 17-year-old male, who is too young to be identified, were found to have carried out several offenses including serious computer misuse, blackmail and fraud against BT Group's EE network and Nvidia.
Kurtaj was also separately accused of hacks into Uber, Rockstar's Grand Theft Auto game, and fintech firm Revolut. The Southwark Crown Court jury only needed to decide on whether Kurtaj was liable for the crimes after the judge found him to be unfit to stand trial because of a complex medical condition.
The jury found him liable for all 12 charges.
The 17-year-old was found guilty of hacking, fraud, and blackmail against Nvidia and cleared over two other counts against EE. He had previously plead guilty to two charges relating to the BT hacks.
Lapsus$ are an international bunch of loosely connected online extortionists.