Charges filed in cybercrime ring that hit 14 different financial institutions

Eight men tried to steal $15 million between March 2012 and June 2013

Corporate legal departments may be — rightfully — frightened by recent cyber breaches, but word came from federal prosecutors on March 17 that they have not forgotten about finding those responsible.

The federal prosecutors announced that eight men have been charged with being members of an international cybercrime ring. According to the charges, the men tried to steal at least $15 million by hacking into U.S. customer accounts at 14 different financial institutions as well as the U.S. Department of Defense.

According to U.S. Attorney Paul Fishman, the men gained unauthorized access to networks, diverted customer funds into personal accounts, then employed “cashers” to withdraw the money and make fraudulent purchases throughout the United States.  The scheme ran between March 2012 and June 2013.

Among the companies hit by the cyber attacks, according to Reuters, are Aon Hewitt, Automatic Data Processing Inc, Citibank NA, eBay Inc's PayPal, Electronic Payments Inc, E*Trade, Fundtech Holdings LLC, iPayment Inc, JPMorgan Chase Bank NA, Nordstrom Bank, TD Ameritrade, TIAA-CREF, USAA, Veracity Payment Solutions Inc, and the Defense Department's finance and accounting service.

Three men, Oleksiy Sharapka and Leonid Yanovitsky of Kiev, Ukraine; and Richard Gundersen, 47, of Brooklyn, New York; are viewed as the key leaders of the cybercrime. All three have been charged with onspiracy to commit wire fraud, conspiracy to commit access device fraud and identity theft, and aggravated identity theft.

These charges come at a time when in-house counsel are particularly conscientious of data security issues. Cyber loss recently ranked as one of business leaders’ top risk concerns for 2014, and data breaches are even transforming the general counsel’s role in the company. And nobody is safe: Even technology-based companies such as Apple and Mt. Gox have been recent victims of cyberattacks.

However, help is coming. In-House counsel are currently dissecting the first version of the NIST’s cybersecurity framework, which could provide a standard model for the creation of new cybersecurity programs.

 

For more leading cybersecurity news, check out these InsideCounsel articles:

Target’s cybersecurity event may have been preventable

Electronic discovery to the Nth degree: ESI in cyber breach incidents

Technology: Dissecting the first version of the NIST’s cybersecurity framework

Target CIO stepping down

Assistant Editor

author image

Zach Warren

Zach Warren is Assistant Editor of InsideCounsel magazine, where he oversees online content submissions and administers InsideCounsel's enewsletters. Zach specializes in new media and multimedia...

Bio and more articles

Join the Conversation

Advertisement. Closing in 15 seconds.