TJX Hacker Charged With Heartland, Hannaford Breaches

TJX Hacker Charged With Heartland, Hannaford Breaches
TJX Hacker Charged With Heartland, Hannaford Breaches

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

Content-Transfer-Encoding: QUOTED-PRINTABLE

By Kim Zetter
Threat Level
August 17, 2009

The constellation of hacks connected to the TJX hacker is growing.

Albert "Segvec" Gonzalez has been indicted by a federal grand jury in 
New Jersey - along with two unnamed Russian conspirators - on charges of 
hacking into Heartland Payment Systems, the New Jersey-based card 
processing company, as well as Hannaford Brothers, 7-Eleven and two 
unnamed national retailers, according to the indictment unsealed Monday. 
Gonzalez, a former Secret Service informant, is already awaiting trial 
over his involvement in the TJX hack.

According to the court document, the hackers allegedly stole more than 
130 million credit and debit card numbers (.pdf) from Heartland and 
Hannaford combined. Prosecutors say they believe these breaches 
constitute the largest data-breach and identity-theft case ever 
prosecuted in the United States. They're investigating other breaches 
and have not ruled out Gonzalez=E2=80=99s involvement in even more intrusions.

"We're not seeing a huge array of hackers capable of doing this, but 
rather a more select group, [and that] demonstrates that there is a 
level of sophistication involved in these hacks," said Assistant U.S. 
Attorney Erez Liebermann of the Justice Department=E2=80=99s New Jersey district 

But these are just the latest in a string of high-profile breaches that 
have been connected to Gonzalez. He and 10 others were charged in May 
and August 2008 with network intrusions into TJX, OfficeMax, Dave & 
Busters restaurant chain and other companies. Jury selection is slated 
to begin Sept. 14 in one of those cases. With regard to the 
Heartland-Hannaford cases, Gonzalez and the two unnamed Russian hackers 
have been charged with one count of conspiracy to commit computer fraud 
and one count of conspiracy to commit wire fraud.


Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Subscribe to InfoSec News 

Site design & layout copyright © 1986-2014 CodeGods