Hacker Ring Stole 160 Million Credit Cards
Summary: U.S. federal authorities indicted five men — four Russians and a Ukrainian — for a hacking scheme prosecutors in New Jersey called the largest ever prosecuted in the U.S., tied to the theft of more than 160 million credit card numbers. The gang is blamed for the 2007 Heartland Payment Systems breach that exposed some 130 million card numbers and the 2011 Global Payments breach that cost the company almost $100 million, using SQL injection attacks and selling the stolen data for $10 to $50 per card.
What you should know: The group allegedly pulled off breaches at Heartland, Global Payments, Hannaford, NASDAQ and others over roughly five years, and three of the five accused remain at large — a reminder that a single SQL injection weakness in a public-facing web server was enough to reach the database behind it.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026