JPMorgan Hackers Breached Anti-Fraud Vendor G2 Web Services
Summary: Federal indictments unsealed this week against four men accused of stealing tens of millions of consumer records from JPMorgan Chase, Scottrade, E-Trade and others identify an unnamed "Victim #12" that Krebs reports is Bellevue, Wash.-based G2 Web Services, a firm that helps banks detect fraudulent and contraband-selling merchants. Prosecutors allege ringleader Gery Shalon, 31, of Tel Aviv and Moscow, and co-conspirators breached G2's network beginning in or about 2012, read employees' emails to monitor detection efforts, and blacklisted the credit and debit card numbers G2 staff used for undercover test buys so those transactions would be automatically declined.
Bottom line: The gang did not just steal data - it turned the anti-fraud vendor's own undercover payment cards into a blocklist, which means the controls banks relied on to spot illicit merchants were being read and neutralized from inside.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026