Make us your home page

Miami man, two others indicted in data theft of up to 130 million accounts

A federal grand jury has indicted three people on charges of hacking into the files of the credit and debit card payment processing giant Heartland Payment Systems last year, part of an investigation the Justice Department is calling the largest identity theft case ever prosecuted.

One of the accused, 28-year-old Albert Gonzalez of Miami, was indicted last year for his alleged role in several other major data breaches, including ones at TJ Maxx, Barnes & Noble, BJ's Wholesale Club, Boston Market, DSW, Forever 21, Office Max and Sports Authority.

In total, the government alleges, the trio stole data on more than 130 million credit and debit cards from Heartland, based in Princeton, N.J.

According to indictments returned Monday in a New Jersey federal court, the government believes the same people were involved in a string of high-profile data breaches from October 2006 to May 2008, including intrusions at the Hannaford Brothers grocery chain and 7-Eleven.

Hannaford oversees Sweetbay Supermarket for Belgian owners DelHaize Group. From Dec. 7, 2007, through March 10, 2008, 1.6 million accounts were compromised because of a breach at 106 Sweetbay stores in Florida.

"This investigation marks the continued success of law enforcement in tracking down cutting-edge hacking schemes committed by hackers working together across the globe," said Ralph J. Marra Jr., acting U.S. attorney for the district of New Jersey.

The indictments returned Monday include two other people accused in the Heartland and Hannaford breaches, described only as "Hacker 1" and "Hacker 2," both of Russia. All three are charged with two counts: conspiracy to gain unauthorized access to computers, to commit fraud in connection with computers and to damage computers, and conspiracy to commit wire fraud. Each defendant faces a maximum of 35 years in prison, as well as more than $1 million in fines or twice the gain resulting from the offense, whichever is greater.

Gonzalez was previously indicted for his alleged role in the TJ Maxx hacks, among others, and is detained in Brooklyn, N.Y., pending trial. He has pleaded not guilty in that case.

Heartland disclosed the breach in January. At the time of the intrusion last summer, Heartland was processing 100 million payments for at least 250,000 businesses each month. The company has not disclosed how many credit and debit accounts may have been compromised in the breach, although at least 650 financial institutions have been affected, according to

In a June filing with the Securities and Exchange Commission, Heartland said that the data breach had cost it $32 million. But the final bill may be far higher: The breaches at TJ Maxx have cost the company at least $200 million to date, according to a filing with the Securities and Exchange Commission.

Information from Times files was used in this report.

Miami man, two others indicted in data theft of up to 130 million accounts 08/17/09 [Last modified: Monday, August 17, 2009 9:07pm]
Photo reprints | Article reprints

Copyright: For copyright information, please check with the distributor of this item, Washington Post.

Join the discussion: Click to view comments, add yours

  1. Pinellas construction licensing board needs to be fixed. But how?

    Local Government

    LARGO –– Everyone agrees that the Pinellas County Construction Licensing Board needs to be reformed. But no one agrees on how to do it.

    Rodney Fischer, former executive director of the Pinellas County Construction Licensing Board Rodney, at a February meeting. His management of the agency was criticized by an inspector general's report. [SCOTT KEELER   |   Times]

  2. New owners take over downtown St. Petersburg's Hofbräuhaus


    ST. PETERSBURG — The downtown German beer-hall Hofbräuhaus St. Petersburg has been bought by a partnership led by former Checkers Drive-In Restaurants president Keith Sirois.

    The Hofbrauhaus, St. Petersburg, located in the former historic Tramor Cafeteria, St. Petersburg, is under new ownership.

  3. Boho Hunter will target fashions in Hyde Park


    Boho Hunter, a boutique based in Miami's Wynwood District, will expand into Tampa with its very first franchise.

    Palma Canaria bags will be among the featured items at Boho Hunter when it opens in October. Photo courtesy of Boho Hunter.
  4. Gallery now bringing useful art to Hyde Park customers


    HYDE PARK — In 1998, Mike and Sue Shapiro opened a gallery in St. Petersburg along Central Ave., with a majority of the space dedicated to Sue's clay studio.

     As Sue Shapiro continued to work on her pottery in St. Petersburg, her retail space grew and her studio shrunk. Now Shapiro's is bringing wares like these to Hyde Park Village. Photo courtesy of Shapiro's.
  5. Appointments at Raymond James Bank and Saint Leo University highlight this week's Tampa Bay business Movers & Shakers



    Raymond James Bank has hired Grace Jackson to serve as executive vice president and chief operating officer. Jackson will oversee all of Raymond James Bank's operational business elements, risk management and strategic planning functions. Kackson joins Raymond James Bank after senior …

    Raymond James Bank has hired Grace Jackson to serve as executive vice president and chief operating officer. [Company handout]