Federal Prosecutors Indict Accused Data Thieves


Federal prosecutors announced yesterday the indictment of five men accused of involvement in the theft of over 160 million credit card numbers. According to prosecutors, thefts by this group involved some of the largest and most notable U.S. data breaches of recent years, including Global Payments, Heartland Payment Systems, Hannaford, and NASDAQ, among others.

Payment card information is among the most sought-after information by data privacy thieves. The indictments allege that this group, based in Russia and the Ukraine, sold the stolen card data to “trusted identity theft wholesalers” for prices ranging from $10 - $50 per card. Federal prosecutors estimate that the group caused “hundreds of millions” of dollars in losses, most of which are borne by companies.

The arrests highlight the challenges faced by businesses from increasingly sophisticated data privacy thieves, and sheds light on the lengths which hackers may be willing to go when targeting companies. The indictment alleges that this group would patiently spend months penetrating corporate networks, using malware, SQL Injection and other tactics. The groups also defined specialized roles for its members, with some members dedicated to penetrating network security, others dedicated to maximizing the amount of the data obtained from the companies, and another responsible for selling the stolen data. The group also undertook measures to conceal their activities.

The men face between 5 and 30 years in prison if convicted.


DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© BakerHostetler | Attorney Advertising

Written by:


BakerHostetler on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.