Public Radio For Eastern North Carolina 89.3 WTEB New Bern 88.5 WZNB New Bern 91.5 WBJD Atlantic Beach 90.3 WKNS Kinston 88.5 WHYC Swan Quarter 89.9 W210CF Greenville
Play Live Radio
Next Up:
0:00
0:00
0:00 0:00
Available On Air Stations
US

5 Men Accused Of Stealing Credit, Debit Card Numbers

DAVID GREENE, HOST:

And let's move, now, to what appears to be the largest case of electronic data theft ever uncovered by U.S. law enforcement. As NPR's Steve Henn reports, U.S. attorneys in New York and New Jersey have unveiled indictments against a Russian-dominated hacking conspiracy.

STEVE HENN, BYLINE: Law enforcement described the scale of these criminal hacks as stunning. According to Paul Fishman, the U.S. attorney for the District of New Jersey, in eight years, the group stole and then sold more than 160 million card numbers. Their hacks led to more than $300 million in losses.

PAUL FISHMAN: And that, by the way, is our conservative estimate of the losses - the amount we've been able to confirm so far; and suffered by only three of the victim companies.

HENN: And Fishman said more than a dozen companies were victimized.

FISHMAN: Seventeen major data breaches, including intrusions into the networks of NASDAQ, 7-Eleven, J.C. Penney, Heartland Payment Systems...

HENN: Members of the group hit banks, including Citibank and PNC. The hackers used a variety of techniques to get the information they wanted. Sometimes, they planted malware on corporate servers; sometimes, they attacked corporate databases directly. And on several occasions, they attacked financial institution websites, creating programs that would guess at an account password again and again - automatically - until they got a hit. In fact, in a single day in 2008, they were able to compromise more than 300,000 Citibank accounts using that technique.

FISHMAN: Sometimes, these attacks and these explorations would take months and months and months. It was not unusual at all for them to spend that kind of time looking for valuable data within a victim's computer network.

HENN: Fishman says that data fueled a global business, selling card numbers to groups of identity theft wholesalers around the world. Kimberly Peretti, who spent eight years as a prosecutor in the cybercrime division of the Justice Department, says taking down a ring that's this sophisticated is incredibly difficult.

KIMBERLY PERETTI: Targets in different countries, witnesses in different countries - it requires an enormous, global law enforcement effort.

HENN: According to investigators, these five hackers were highly specialized, and very good at what they did. One, Mikhail Rytikov from Ukraine, worked only on covering their tracks. Rytikov and two colleagues are still at large.

Steve Henn, NPR News, Silicon Valley.

(SOUNDBITE OF MUSIC) Transcript provided by NPR, Copyright NPR.

US
Steve Henn is NPR's technology correspondent based in Menlo Park, California, who is currently on assignment with Planet Money. An award winning journalist, he now covers the intersection of technology and modern life - exploring how digital innovations are changing the way we interact with people we love, the institutions we depend on and the world around us. In 2012 he came frighteningly close to crashing one of the first Tesla sedans ever made. He has taken a ride in a self-driving car, and flown a drone around Stanford's campus with a legal expert on privacy and robotics.