Data Theft > Identity Theft > 11 Charged

Posted on August 7, 2008
Filed Under Security News | Leave a Comment

The largest data theft and identity theft case prosecuted by the Department of Justice, leads to eleven people being charged with numerous crimes, including conspiracy, computer intrusion, fraud and identity theft, the DOJ announced, charges relate to the theft of more than 40 million credit and debit card numbers.

Attorney General Michael B. Mukasey and U.S. Attorneys from Massachusetts, the Southern District of California, the Eastern District of New York, and U.S. Secret Service Director Mark Sullivan all had a hand in the case and released information explaining the scope of the conspiracy.

“While technology has made our lives much easier it has also created new vulnerabilities. This case clearly shows how strokes on a keyboard with a criminal purpose can have costly results. Consumers, companies and governments from around the world must further develop ways to protect our sensitive personal and business information and detect those, whether here or abroad, that conspire to exploit technology for criminal gain,” added U.S. Attorney Michael J. Sullivan.

In an indictment returned on Aug. 5, 2008, by a federal grand jury in Boston, Albert “Segvec” Gonzalez, Christopher Scott and Damon Patrick Toey, of Miami, were charged with computer fraud, wire fraud, access device fraud, aggravated identity theft, and conspiracy for their role in the scheme. However, Gonzalez is at the center of the case, while not named as the “ring leader,” he is the focus of many of the recently released court documents.

The Boston indictment claims that Gonzalez and his fellow conspirators obtained credit and debit card numbers by wardriving and hacking into the wireless computer networks of major retailers — including TJX Companies, BJ’s Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW.

Once inside, the attackers installed sniffers that collected information and stored it in a central location. Gonzalez and his crew are then said to have sold some of the credit and debit card numbers, via the Internet, to others in the United States and Eastern Europe. The stolen numbers were then “cashed out” by encoding card numbers on the magnetic strips of blank cards. The newly minted cards were used to withdraw tens of thousands of dollars at a time from ATMs. Gonzalez and others were allegedly able to conceal and launder their fraud proceeds by using anonymous Internet-based currencies both within the United States and abroad, and by channeling funds through bank accounts in Eastern Europe.

Ministry of Defence admits loss of ’secret’ files

Posted on July 18, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

The Ministry of Defence (MoD) admitted more than 650 laptops had been stolen over the past four years - nearly double the figure previously claimed.

The department also said that 26 portable memory sticks containing classified information had been either stolen or misplaced since January.

The Lib Dems condemned the latest security breaches as evidence of “shocking incompetence”.

Full Story Here

Weber Law Firm

Posted on July 15, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

Sheriff’s deputies uncovered hundreds of people’s personal financial files that had been discarded in a dumpster in northwest Houston. Box after box of records including personal financial records, documents with Social Security numbers, people’s medical files and more were found in the dumpster.

Missouri National Guard

Posted on July 15, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

The Missouri National Guard has called for a criminal investigation after it learned that the personal information of as many as 2,000 soldiers had been breached. The Guard would not release how the personal information had been taken — whether by computer hackers or other means — because it has asked for a full law enforcement investigation into the matter.

US Army - Fort Lewis

Posted on July 11, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

A laptop computer that was reported stolen from an Army employee’s truck contained personal information on about 800 to 900 Fort Lewis soldiers.

A 17-year-old Lacey boy faces a charge of suspicion of possession of stolen property after Tumwater police uncovered items from vehicle prowls, including a stolen Army laptop containing information about up to 900 Fort Lewis soldiers.

Williamson County (TN) Schools

Posted on July 10, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

Social Security numbers and other personal information of 4,000 children were posted on the Internet.

Wichita Radiological Group

Posted on July 9, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

A former employee stole patient records before being fired from the Wichita Radiological Group. Tens of thousands of patient records were in the database could have been compromised.

Wagner Resource Group

Posted on July 9, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

Sometime late last year, an employee of a McLean investment firm used the online file-sharing network LimeWire. In doing so, he inadvertently opened the private files of his firm to the public. That exposed the names, dates of birth and Social Security numbers of about 2,000 of the firm’s clients, including a number of high-powered lawyers and Supreme Court Justice Stephen G. Breyer.

Division of Motor Vehicles Colorado

Posted on July 9, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

The DMV regularly sends large batches of personal information over the Internet without encryption and has failed to properly limit access to its database, according to a recent audit. At one point, 33 former DMV employees could access 3.4 Million names, addresses, dates of birth and Social Security numbers.

LPL Financial

Posted on July 8, 2008
Filed Under Data Theft & Security Breaches | Leave a Comment

Hackers potentially got their hands on clients unencrypted names, addresses and Social Security numbers. Hackers compromised the logon passwords of 14 financial advisers and four assistants.

keep looking »