A Miami man already awaiting trial for what had been the biggest credit card data theft in U.S. history was indicted Monday for his role in an even larger breach.
The Justice Department said a grand jury in federal court in Newark, N.J., returned a two-count indictment against Albert Gonzalez, 28, and two unnamed co-conspirators for the theft of more than 130 million credit and debit cards.
Gonzalez is charged with conspiracy to engage in wire fraud, which could result in a 20-year prison sentence, and conspiracy, which has a maximum prison term of five years. He faces a $250,000 fine on each count, prosecutors said.
Beginning in October 2006, the three allegedly used a technique called an “SQL injection attack” to steal data from the computer networks of corporate targets including 7-Eleven Inc.; Heartland Payment Systems, a Princeton, N.J.-based processor, and Hannaford Brothers Co. Inc., a Scarborough, Maine-based grocer, authorities alleged.
The new indictment adds to a growing list of legal troubles for Gonzalez.
You May Also Like
In August 2008, the Justice Department charged the alleged hacker for his role as the accused mastermind of a group that stole more than 40 million payment card numbers from retailers including The TJX Cos., DSW Inc. and Forever 21.
Then-U.S. Attorney General Michael Mukasey called that investigation “the largest and most complex identity theft case ever charged in this country.” The trial is set to begin in January.
In May 2008, Gonzalez, who is currently in custody, was charged in U.S. District Court in Brooklyn for his role in the breach of a national restaurant chain’s network. His trial for that incident is due to start next month on Long Island.
In June, The TJX Cos. said it would pay $9.8 million as part of a settlement with the attorneys general of 41 states to end their investigations into the retailer’s fault in the thefts. TJX had previously agreed to pay more than $64 million in recovery payments to banks representing cardholders whose personal information was stolen.