GoFuckYourself.com - Adult Webmaster Forum - largest alleged credit and debit card data breach ever charged in the United States

- Fucking Around & Business Discussion (https://gfy.com/forumdisplay.php?f=26)

largest alleged credit and debit card data breach ever charged in the United States

http://www.usdoj.gov/opa/pr/2009/August/09-crm-810.html

Anyone having those 130mill CC data for sale? :1orglaugh

Quote:

WASHINGTON ? Albert Gonzales, 28, of Miami, Fla., was indicted today for conspiring to hack into computer networks supporting major American retail and financial organizations, and stealing data relating to more than 130 million credit and debit cards, announced Assistant Attorney General of the Criminal Division Lanny A. Breuer, Acting U.S. Attorney for the District of New Jersey Ralph J. Marra Jr. and U.S. Secret Service Assistant Director for Investigations Michael Merritt.

In a two-count indictment alleging conspiracy and conspiracy to engage in wire fraud, Gonzales, AKA "segvec," "soupnazi" and "j4guar17," is charged, along with two unnamed co-conspirators, with using a sophisticated hacking technique called an "SQL injection attack," which seeks to exploit computer networks by finding a way around the network?s firewall to steal credit and debit card information. Among the corporate victims named in the indictment are Heartland Payment Systems, a New Jersey-based card payment processor; 7-Eleven Inc., a Texas-based nationwide convenience store chain; and Hannaford Brothers Co. Inc., a Maine-based supermarket chain.

The indictment, which details the largest alleged credit and debit card data breach ever charged in the United States, alleges that beginning in October 2006, Gonzales and his co-conspirators researched the credit and debit card systems used by their victims; devised a sophisticated attack to penetrate their networks and steal credit and debit card data; and then sent that data to computer servers they operated in California, Illinois, Latvia, the Netherlands and Ukraine. The indictment also alleges Gonzales and his co-conspirators also used sophisticated hacker techniques to cover their tracks and to avoid detection by anti-virus software used by their victims.

If convicted, Gonzales faces up to 20 years in prison on the wire fraud conspiracy charge and an additional five years in prison on the conspiracy charge, as well as a fine of $250,000 for each charge.

Gonzales is currently in federal custody. In May 2008, the U.S. Attorney?s Office for the Eastern District of New York charged Gonzales for his alleged role in the hacking of a computer network run by a national restaurant chain. Trial on those charges is scheduled to begin in Long Island, N.Y., in September 2009.

In August of 2008, the Justice Department announced an additional series of indictments against Gonzales and others for a number of retail hacks affecting eight major retailers and involving the theft of data related to 40 million credit cards. Those charges were filed in the District of Massachusetts. Gonzales is scheduled for trial on those charges in 2010.

The charges announced today relate to a different pattern of hacking activity that targeted different corporate victims and involved different co-conspirators.

This case is being prosecuted by Assistant U.S. Attorneys Erez Lieberman and Seth Kosto for the U.S. Attorney?s Office for the District of New Jersey and by Senior Trial Counsel Kimberly Kiefer Peretti of the Criminal Division?s Computer Crime and Intellectual Property Section. The case is being investigated by the U.S. Secret Service.

i dreamed a dream of time gone by!!!!

Quote:

sophisticated hacking technique called an "SQL injection attack,"

:1orglaugh:1orglaugh

thats a lot of fucking credit cards

Ouch...

So we have "i sale 130 milion cc infos" to look forward to?

How long until Anal Hobbit is selling this list?

Props to the nickname soupnazi though.

NO SOUP FOR YOU!

wow... that's a lot of cc info...
this guy is gone for good...

Quote:

Originally Posted by woj (Post 16196330)

:1orglaugh:1orglaugh

thinking the same thing... SQL injection, really? :1orglaugh:1orglaugh:1orglaugh

I think the law enforcement always "hype" up the numbers in this kinda stuff for the headlines. If you ever notice every drug bust is the largest ever.. every spammer is the worst ever.. ect..ect.

They hype up the numbers to justify their budgets.

I didn't read the whole article but surely

Quote:

was indicted today for conspiring to hack into computer networks

Conspiring means he didn't actually do it they cuaght him before hand.

Quote:

Originally Posted by XD2 (Post 16196667)

I didn't read the whole article but surely

Conspiring means he didn't actually do it they cuaght him before hand.

uhhmm.. no. That is not the meaning of "Conspiring" in this case. It means "To join or secretly act together"

"using a sophisticated hacking technique called an "SQL injection attack," which seeks to exploit computer networks by finding a way around the network’s firewall to..."

Please read as... using one of the oldest tricks in the book that has nothing to do with a firewall what-so-ever and that every DBA should be aware of...

"Go up, my warriors, against the land of Merathaim and against the people of Pekod. Yes, march against Babylon, the land of rebels, a land that I will judge! Pursue, kill, and completely destroy them, as I have commanded you," says the LORD. "Let the battle cry be heard in the land, a shout of great destruction". (Jeremiah 50:21-22 NLT)

Damn, that's a shitload of credit cards.

Quote:

Originally Posted by budsbabes (Post 16198508)

lol wtf :1orglaugh

Quote:

sophisticated hacking technique called an "SQL injection attack,"

Quote:

Originally Posted by woj (Post 16196330)

:1orglaugh:1orglaugh

WOW!

first, what bank did not protect themselves against an sql injection? unless you are using $5/hr philippine or indian programmer your ass is stupid.

this scum bag that i used to work for when I first moved to Cali years ago got his entire database hacked by someone who was kind enough to email him telling him what he did... its sad that people wont pay the extra dollar for a programmer with half a brain for their business