Two Israelis and an American busted in largest-ever heist of customers’ bank data

[drycreek]

Two Israelis and an American hacked into JPMorgan Chase, Fidelity, Dow Jones, and nine other companies in the largest cyber-attack on US financial institutions ever — stealing personal data of more than 100 million customers, the feds said Tuesday.

Gery Shalon and Ziv Orenstein of Israel and Joshua Samuel Aaron of the US were charged in​ Manhattan federal court ​with computer hacking, securities and wire fraud, identity theft, Internet gambling and money laundering, ​Manhattan US Attorney Preet Bharara announced.

“We have exposed a cybercriminal enterprise that for years successfully and secretly hacked into the networks of a dozen companies, allegedly stealing personal information of over 100 million people, including over 80 million customers from one financial institution alone,” Bharara said.

“ The charged crimes showcase a brave new world of hacking for profit. It is no longer hacking merely for a quick payout, but hacking to support a diversified criminal conglomerate. This was hacking as a business model.”

Two Israelis and an American busted in largest-ever heist of customers’ bank data (http://nypost.com/2015/11/10/two-israelis-and-an-american-busted-by-feds-in-massive-jp-morgan-hack/)

[mick silver]

It a wonder they didn't say china did it and let them go free

[palani]

Wonder who the injured party is. Apparently all these guys did was use email info to profit by trading stock. The decision to trade still belonged to the ones whose information was snatched.

[Cebu_4_2]

It a wonder they didn't say china did it and let them go free


Apparently these Jews were thrown under the bus. I can bet the 'amerikan' was another of that tribe.

[osoab]

Only a pic of their goy patsy too. Headline should have read "3 Jews and a Goy Patsy Busted in ...."

[BrewTech]

Apparently these Jews were thrown under the bus. I can bet the 'amerikan' was another of that tribe.


Pfff... "Joshua Samuel Aaron" is clearly a gentile handle...

[cheka.]

100 million people?????? why does jpm have personal info on 83 million?

http://www.nwaonline.com/news/2015/nov/11/4-charged-in-hackings-of-financial-inst/?news-world

Two indictments, unsealed Tuesday, tied three suspects to previously reported hacks of JPMorgan Chase & Co., E-Trade Financial Corp., Scottrade Financial Services Inc. and Dow Jones & Co., a unit of News Corp.

The summer 2014 theft of data such as names, addresses, emails and phone numbers of more than 83 million customers of JPMorgan, the nation's biggest bank by assets, was described at a news conference by U.S. Attorney Preet Bharara as "the single largest theft of customer data from a U.S. financial institution ever."

In a news release, Attorney General Loretta Lynch said the defendants "perpetrated one of the largest thefts of financial-related data in history -- making off with the sensitive information of literally thousands of hard- working Americans."

One of the indictments, unsealed in Manhattan federal court, said information on millions of other customers was stolen in cyberattacks from 2012 to last summer against other businesses in the financial sector.

Charged in the indictment were Gery Shalon, 31, of Savyon, Israel; Ziv Orenstein, 40, of Bat Hefer, Israel; and Joshua Samuel Aaron, 31, a U.S. citizen living in Moscow and Tel Aviv, Israel. All three men were charged in July with related crimes, though the hacking crimes were not specified then. Aaron was labeled a fugitive; Orenstein and Shalon were arrested in Israel in July. Bharara said the U.S. was seeking their extradition.

Since 2007, one or more of the defendants had engaged in other schemes, including U.S. securities market manipulation and the operation of at least a dozen Internet casinos that violated U.S. laws, the indictment said.

"In our view, the conduct alleged in this case showcases a brave new world of hacking for profit," Bharara said. "In short, it is hacking as a business model."

The indictment said some of the cyberattacks occurred as the men sought to steal the customer bases of competing Internet gambling businesses or to secretly review executives' emails in a quest to cripple rivals.

Authorities said the suspects used about 200 fake identity documents, including more than 30 fake passports, made to look as if they were issued by the United States and at least 16 other countries, as they operated their schemes and laundered the proceeds through at least 75 shell companies and bank and brokerage accounts worldwide.

Among the charges in the indictment were computer hacking, conspiracy to commit computer hacking, securities fraud and conspiracy to commit securities fraud.

"We continue to cooperate with law enforcement in fighting cybercrime," JPMorgan spokesman Trish Wexler said in a statement Tuesday.

A related indictment unsealed Tuesday in Atlanta named Shalon, Aaron and an unidentified person. They are charged in a scheme to hack into E-Trade Financial Corp. and Scottrade Financial Services Inc. to steal personal information from millions of customers with the intent to build their own securities brokerage.

U.S. Attorney John Horn in Atlanta said Shalon and the unidentified hacker used online chats to discuss their plan. He said they had some success cold-calling investors and had discussed selling their database to a bank. Horn said the contact information of more than 10 million E-Trade and Scottrade customers was compromised in the late 2013 attack.

Charges related to those attacks are included in the New York indictment, but the companies aren't identified by name.

On Tuesday, E-Trade Financial, based in New York, said it found no evidence that sensitive financial information taken in the 2013 attack had been compromised. It added that access may have been obtained to contact information for about 31,000 customers.

"Security is a top priority, and we focus a significant amount of time and energy to help keep our customers' data and information safe and secure," E-Trade said in a statement.

A lawyer for Orenstein didn't immediately return a message seeking comment. A lawyer for Shalon couldn't immediately be reached.

Bharara said law enforcement authorities teamed up as never before in the case.

"The sad truth is that to date, complex cybercrimes like these tend to go unsolved and the criminals tend to go unprosecuted. More often than not, the trail goes cold and the perpetrators get off," Bharara said. "We believe we've changed that narrative and this case is game-changing proof."

Information for this article was contributed by Larry Neumeister, Kate Brumback and Marcy Gordon of The Associated Press; by Liz Moyer of The New York Times; and by Greg Farrell and Patricia Hurtado of Bloomberg News.

[monty]

100 million people?????? why does jpm have personal info on 83 million?

If you think about the number of people who have filled out an application for credit for utilities services, car loans, mortgages, credit cards, etc., all that information is in a database somewhere and all the banks, insurance companies, dmv's, hospitals and every conceivable government agency has access to it. Just plug in a social security number and, presto! It probably exceeds the 100 million number.

[cheka.]

If you think about the number of people who have filled out an application for credit for utilities services, car loans, mortgages, credit cards, etc., all that information is in a database somewhere and all the banks, insurance companies, dmv's, hospitals and every conceivable government agency has access to it. Just plug in a social security number and, presto! It probably exceeds the 100 million number.


that makes sense. jpm has access to the master database....with everything you listed feeding into it

lovely

td ameritrade let (gave, sold?) my info to some fockwads in brooklyn....who promptly emptied my credit union checking/savings accts

[Cebu_4_2]

that makes sense. jpm has access to the master database....with everything you listed feeding into it

lovely

td ameritrade let (gave, sold?) my info to some fockwads in brooklyn....who promptly emptied my credit union checking/savings accts

Need to feed some false information into that database. One lawyer trying to reclaim money I paid off is despirate and I receive 5-6 notices a month from different banks in different states sending me garnishments on accounts that do not exist. When I do get these envelopes I simply scratch off my name and write "Return to sender". Not sure how this will all work out but as far as can tell you can't get water out of a rock.

[mick silver]

that's not what nasa saying Cebu
...water out of a rock