Netstat -vat by Sean Michael Kerner (bio )

A command line view of IT

« Tr.im going open source | Sean Michael Kerner Blog | Google Chrome 4 debuts with bookmark sync »

Heartland breach indictment is heartwarming for 130 million people

By Sean Michael Kerner on August 18, 2009 9:14 AM

From the 'Do Not Pass Go, Do Not Collect $200' files:

How does one man in Florida (along with two co-conspirators in Russia) steal 130 million credit numbers?

It all starts with a trojan and a SQL injection attack that creates a back-door. Yes there are problems with technology security. In my view though, there is a more important message to the story.

The fact that one man could be the ringleader for such massive fraud is staggering, but the fact that the U.S Justice system and law enforcement found and caught the perpetrator is a key point. The key message is that cyber-criminals can and will be brought to justice and the Internet isn't a place to hide.

"In a two-count indictment alleging conspiracy and conspiracy to engage in wire fraud, Gonzalez, AKA "segvec," "soupnazi" and "j4guar17," is charged, along with two unnamed co-conspirators, with using a sophisticated hacking technique called an "SQL injection attack," which seeks to exploit computer networks by finding a way around the network's firewall to steal credit and debit card information," the U.S Justice department said in a statement.

Gonzalez hacked Heartland Payment Systems, 7-Eleven Inc., a Texas-based nationwide convenience store chain; and Hannaford Brothers Co. Inc., a Maine-based supermarket chain. The Justice Department calls the indictment, the largest alleged credit and debit card data breach ever charged in the United States.

Yet the brutal reality is that Gonalez has done even more damage. Gonzalez was already in custody related to a series of eight retail hacks affecting and additional 40 million credit cards. So one man (with a little help) stole upwards of 170 million credit cards.

Astounding.

For his crimes, if Gonzalez is convicted in the Heartland incident, he'll face a fine of at least $250,00, and up to 25 years in prison.

Gonzales had servers in California, Illinois, Latvia, the Netherlands and Ukraine to steal the credit card info. They also used various methods to try and cover their tracks, yet it is now clear those efforts weren't good enough.

That's a good thing for all of us.

Credit card info being hacked is not a good thing, but by having the people behind the attacks caught by law enforcement is a great thing. It sends a message to both the general public and other criminals that the long arm of the law extends beyond physical and geographical boundaries.

Permalink | Comments (0) | TrackBacks (0) | Share