The Justice Department has charged 11 people with the theft of more than 40 million payment card numbers from retailers including TJX Cos., DSW Inc. and Forever 21. The department’s investigation revealed an international operation of enormous scope and complexity tying together data security breaches at nine U.S. retailers that were previously thought to be unrelated.
The alleged perpetrators were charged on Tuesday with fraud, identity theft and conspiracy in federal courts in Boston and San Diego.
According to indictments returned by federal grand juries in the two cities, the conspirators obtained the numbers by hacking into the wireless computer networks of various U.S. retailers and installing a type of software known as a packet sniffer to capture consumers’ data.
“So far as we know, this is the single largest and most complex identity theft case ever charged in this country,” said Attorney General Michael Mukasey in Boston. “They used sophisticated computer hacking techniques, breaching security systems and installing programs that gathered enormous quantities of personal financial data, which they then allegedly sold to others or used themselves. And, in total, they caused widespread losses by banks, retailers and consumers.”
The ring targeted a wide range of retailers, including BJ’s Wholesale Club Inc., OfficeMax, Boston Market, Barnes & Noble and Sports Authority, as well as TJX, Forever 21 and DSW. The TJX incident, which the company acknowledged in January 2007, was the largest. It compromised information relating to 45.7 million credit and debit cards as well as the driver’s licenses and, in some cases, social security numbers of as many as 450,000 customers who returned items without a receipt, TJX said.
The 11 people indicted include three U.S. citizens and citizens of at least four other countries in Europe and Asia. Miami resident Albert Gonzalez is alleged to be the plot’s mastermind.
According to the indictment returned Tuesday in Boston, Gonzalez had been arrested by the Secret Service in 2003 for access device fraud and subsequently worked as a confidential informant. His alleged further criminal activity was discovered later.
Of the suspects charged Tuesday, only three are in custody and only one, Gonzalez, is in U.S. custody. According to the Department of Justice, officials in Turkey are holding Maksym Yastremskiy of Ukraine and officials in Germany are holding Aleksandr Suvorov of Estonia. Both men face pending extradition proceedings. The U.S. charged all three in a related indictment in federal court in New York in May alleging that they stole card numbers from the Dave & Buster’s restaurant chain using sniffer software.
Gonzalez and alleged conspirators Christopher Scott and Damon Patrick Toey located retailers’ wireless networks by driving by with a laptop with Wi-Fi installed, according to the Boston indictment issued Tuesday. The group then hacked into the networks and installed sniffer software to collect payment card numbers as well as password and account information as the data was passing through the retailers’ networks. Some of the data were sold to other criminals in the U.S. and in Eastern Europe. The conspirators also withdrew tens of thousands of dollars at a time from ATMs using blank cards in whose magnetic strips they encoded stolen card numbers. They concealed fraudulent earnings by using anonymous Internet-based currencies and Eastern European bank accounts, the Justice Department alleged.
The San Diego indictments, brought after a three-year investigation by the Secret Service, charge Yastremskiy, Suvorov, Hung-Ming Chiu and Zhi Zhi Wang of China and an unidentified person known only by the Internet handle “Delpiero” with conspiracy, trafficking and identity theft for their alleged roles in selling the credit card data Gonzalez obtained. Sergey Pavolvich of Belarus and Dzmitry Burak and Sergey Storchak, both of Ukraine, were charged with conspiracy to traffic in unauthorized devices.
EXCLUSIVE: @tomford is opening its first-ever beauty store. The boutique, which opens November 20 in London’s Covent Gardens, was designed with the over-the-top glam Ford is known for. Read the full story on WWD.com, link in bio. #wwdbeauty #wwdnews (📷: Simon Wagner) #TomFordBeauty
New York-based DJ @harleyvnewton threw a party to celebrate the holiday collection of her dress and pajama line @hvn at the Ladurée Beverly Hills. It Girls @katebosworth, @rashidajones and more joined in on the fun, which included cocktails, croque monsieur sandwiches and a photo booth. #wwdfashion (📷: Owen Kolasinski/BFA.com)
For the holidays, @Burberry partnered with 20-year-old artist @blondeymccoy on a series of three outdoor murals in downtown Manhattan. The murals are McCoy’s interpretation of a Christmas eve party, the idea of charity and the spirit of family. His third mural, pictured here, is the most personal. The image depicts McCoy’s grandparents and father in London’s Trafalgar Square in the Seventies. “My work often features lots of sentimental objects.” #wwdeye
For spring 2018, designers applied bold colors and cartoonish motifs on everything from sneakers and belts to key chains. See all the top men’s accessories trends on WWD.com. #wwdtrends (📷: George Chinsee; Prop Styling by @rnasti; Market Editor: @luiscampuzano)
The @dior-sponsored @guggenheim international gala pre-party has a history of drawing cool-girl musical acts to serenade the crowd –– and last night was no exception. @haimtheband performed songs both new and old, and lured a star-studded audience with the likes of Rebecca Hall, Kate Mara, Mamoudou Athie and more. #wwdeye (📷: @lexieblacklock)
In a partnership between the @metopera and the @englishnationalopera, “Marnie” was born. The opera, with costumes sponsored by @mrporterlive, is an adaptation of the 1961 thriller by Winston Graham. Arianne Phillips, who created the costumes, is no rookie: She’s styled Madonna for her tours and created costumes for a myriad of films in the past. Read WWD’s interview with Phillips, where she talks about her inspiration for the opera’s costumes on WWD.com #wwdfashion
@barneysnyc took a different approach to their holiday windows this year. Instead of Christmas decor, Barneys tapped @thehaasbrothers to tell a story of positivity, gratitude and inclusivity via heartwarming silliness and humor. “It’s about kids and it’s about coming together and being family and loving each other,” said Simon Haas. #wwdfashion (📷: @joshuascottphoto)
Beauty influencer @kandeejohnson makes her foray into hair care with a collaboration with @ogx_beauty — making it the first time that OGX has teamed up for a product creation. The collab includes shampoos and conditioners in three scents. At 39 and a mom, Johnson is a different profile than the emerging social media stars, but is considered one of the pioneers of the digital beauty influencer world. Read WWD’s interview with her on wwd.com, including the strangest beauty product she’s ever tried #wwdbeauty