BOSTON — Could a conspiracy of only 11 people have committed some of the most serious and sweeping card data thefts that have damaged CUs in the last three years?

That is what the U.S. Department of Justice alleged in indictments handed down in Boston yesterday. The indictments, which led to cases being filed in several jurisdictions, said that the 11, which included three U.S. citizens, three Ukrainian citizens, two citizens of the People's Republic of China, one citizen of Belarus and one citizen of Estonia, hacked into the computer networks of at least eight retailers in the U.S. Once inside, the indictments allege, the conspirators installed "sniffer" programs to find consumers card data, including personal identification numbers, and move the date to the conspirators' networks.

One conspirator is only known by an alias and thus his or her identity and nationality are unknown.

Once they had the data, the Justice Department alleged the conspirators stored the data on their own encrypted servers and sold the information to others who in turn made cards and used the falsified cards to defraud consumers through other retailers or ATMs.

NOT FOR REPRINT

© Arc, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to TMSalesOperations@arc-network.com. For more information visit Asset & Logo Licensing.