Three Ukrainians arrested for hacking over 100 US companies

August 1, 2018 by Chris Lefkow
The US Justice Department announced the arrest of three Ukrainians alleged to have hacked more than 100 US businesses

Three Ukrainians have been arrested for hacking more than 100 US companies and stealing millions of credit and debit card numbers, the Department of Justice announced Wednesday.

Dmytro Fedorov, 44, Fedir Hladyr, 33, and Andrii Kolpakov, 30, are high-ranking members of an "international cybercrime group" called "FIN7" which had dozens of members around the world, the department said in a statement.

"Since at least 2015, FIN7 members engaged in a highly sophisticated malware campaign targeting more than 100 US companies, predominantly in the restaurant, gaming, and hospitality industries," it said.

"FIN7 hacked into thousands of computer systems and stole millions of customer credit and , which the group used or sold for profit," it said.

The Justice Department said members of the "prolific hacking group" also targeted computer networks in Britain, Australia, and France.

FBI special agent Jay Tabb told a press conference in Seattle, Washington, where the arrests were announced, that the hacking was not state-sponsored.

"No linkage at all to any state-sponsored activity," Tabb said. "This is just old-fashioned organized crime."

Fedorov, a "high-level hacker and manager," was arrested in Bielsko-Biala, Poland, in January and is being detained pending extradition to the United States, the Department of Justice said.

Hladyr, FIN7's systems administrator, was arrested in Dresden, Germany, in January, it said, and is being held in Seattle, Washington, pending a trial scheduled to open on October 22.

Kolpakov, described as a "supervisor of a group of hackers," was arrested in Lepe, Spain, in late June and is being detained there pending a US extradition request, the department said.

Chipotle, Arby's targeted

"Cyber criminals who believe that they can hide in faraway countries and operate from behind keyboards without getting caught are just plain wrong," said Annette Hayes, US Attorney for the Western District of Washington.

The charges against the three were contained in federal indictments unsealed on Wednesday.

They were charged with 26 counts of conspiracy, wire fraud, computer hacking, access device fraud, and aggravated identity theft.

The Justice Department said that FIN7 also known as the "Carbanak Group" and the "Navigator Group," breached computer networks of companies in 47 US states and Washington DC.

They allegedly stole "more than 15 million customer card records from over 6,500 individual point-of-sale terminals at more than 3,600 separate business locations."

Among the companies which have publicly disclosed hacks by FIN7 are Chipotle Mexican Grill, Chili's, Arby's, Red Robin and Jason's Deli, the Justice Department said.

Many of the businesses were targeted through phishing schemes involving email.

"FIN7 carefully crafted email messages that would appear legitimate to a business' employee, and accompanied emails with telephone calls intended to further legitimize the email," it said.

Once an attached file was opened, it would trigger malware to steal payment card data which was sold on online underground marketplaces.

Explore further: 36 indicted in global cybercrime ring that stole $530M

Related Stories

36 indicted in global cybercrime ring that stole $530M

February 7, 2018

Thirty-six people were indicted in connection with an international identity theft ring known as a "one-stop shop for cybercriminals" that sold stolen credit card information on the dark web, leading to losses of more than ...

Son of Russian lawmaker faces new hacking charges

October 9, 2014

A Russian national arrested this year by US officials was indicted on additional hacking charges, alleging he led a scheme to steal some two million credit card numbers, officials said.

Romanians charged in US with computer fraud

December 9, 2011

Four Romanians have been charged with hacking into the computer systems of hundreds of US merchants and making millions of dollars in purchases with stolen credit card data, the Justice Department said Thursday.

US court sentences Estonian hacker to prison

July 18, 2012

An Estonian national was sentenced Wednesday to seven years in prison for hacking schemes involving the theft or sale of more than 240,000 credit card numbers, officials said.

Recommended for you

Cellular microRNA detection with miRacles

March 26, 2019

MicroRNAs (miRNAs) are short noncoding regulatory RNAs that can repress gene expression post-transcriptionally and are therefore increasingly used as biomarkers of disease. Detecting miRNAs can be arduous and expensive as ...

What happened before the Big Bang?

March 26, 2019

A team of scientists has proposed a powerful new test for inflation, the theory that the universe dramatically expanded in size in a fleeting fraction of a second right after the Big Bang. Their goal is to give insight into ...

Probiotic bacteria evolve inside mice's GI tracts

March 26, 2019

Probiotics—which are living bacteria taken to promote digestive health—can evolve once inside the body and have the potential to become less effective and sometimes even harmful, according to a new study from Washington ...

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.