40M Credit Card Numbers Stolen

December 9, 2008

Washington Post reported today that 11 people were charged in the global theft of 40 million credit card numbers from at least nine U.S. retailers in what they said was one of the largest and most complex hacking and identity theft cases ever brought.

Officials with the Department of Justice said the people indicted were part of a criminal ring that stretched from the United States to Eastern Europe to East Asia, highlighting the global nature of computer crime. Charges of conspiracy, computer intrusion, fraud and identity theft have been brought against people from Estonia, Ukraine, China and Belarus, as well as the United States.

One person, known only by an online alias, Delpiero, has not been located.

Using sophisticated hacking techniques that included cruising for wireless networks, officials said the accused breached security systems to obtain credit and debit numbers from shoppers at major retailers such as T.J. Maxx and Marshalls, which are owned by TJX Cos.; Barnes & Noble; BJ’s Wholesale Club; and Sports Authority.

“Cases like this send a clear message to those who might be tempted to abuse our computer networks to steal information and harm law-abiding people and businesses: If you do, we will track you down wherever you are in the world, we will arrest you, and we will send you to jail,” Attorney General Michael B. Mukasey said at a news conference yesterday.

He said the case highlights the increasing vulnerability of personal information to t…