TRENTON, N.J. — Federal prosecutors on Monday charged a Miami man with the largest case of credit and debit card data theft ever in the United States, accusing the one-time government informant of swiping 130 million accounts on top of 40 million he stole previously.
Albert Gonzalez, 28, broke his record for identity theft by hacking into retail networks, according to prosecutors, though they say his illicit computer exploits ended when he went to jail on charges stemming from an earlier case.
Gonzalez is a former informant for the U.S. Secret Service who helped the agency hunt hackers, authorities say. The agency later found out that he had also been working with criminals and feeding them information on ongoing investigations, even warning off at least one person, according to authorities.
Gonzalez, awaiting trial in another case, was indicted Monday in New Jersey and charged with conspiring with two unnamed suspects to steal the private information.
Prosecutors say the goal was to sell the stolen data to others.
How much of the data was sold and then used to make fraudulent credit charges is unclear. Investigators in such cases say it is usually impossible to quantify the impact of such thefts on account holders.
Prosecutors say Gonzalez, who is known online as “soupnazi,” targeted customers of convenience store giant 7-Eleven and supermarket chain Hannaford Brothers. He also targeted Heartland Payment Systems, a New Jersey-based card payment processor.
According to the indictment, Gonzalez and two Russian coconspirators would hack into corporate computer networks and secretly place “malware,” or malicious software, that would allow them backdoor access to the networks later to steal data.
Gonzalez faces up to 20 years in prison if convicted of the new charges. His lawyer did not immediately return a call for comment.
