Albert Gonzalez, Credit Card Fraud, Massachusetts 2009

BOSTON, MA – Albert Gonzalez, aka “Segvec,” of Miami, Florida, today admitted to masterminding one of the largest credit and debit card breaches in U.S. history, pleading guilty to 19 federal counts including conspiracy, computer fraud, wire fraud, access device fraud, and aggravated identity theft. The confession comes after a lengthy U.S. Secret Service investigation that exposed a staggering theft of over 40 million credit and debit card numbers from numerous retailers, with potential losses exceeding a jaw-dropping $21 billion.

Gonzalez, a repeat offender previously busted by the Secret Service in 2003 for access device fraud, was shockingly operating as a confidential informant for the very agency investigating him. The revelation that Gonzalez wasn’t just *involved* in the TJX scheme, but its central architect, is a damning indictment of oversight and a chilling reminder that even those working with law enforcement can be deeply embedded in criminal activity.

The scheme, detailed in an indictment unsealed in August 2008, relied on a crude but effective technique known as “wardriving.” Gonzalez and his co-conspirators cruised near major retail locations, searching for unsecured wireless networks. Once inside, they deployed “sniffer” programs to intercept sensitive data as it traveled through the stores’ payment processing systems, vacuuming up credit and debit card numbers, passwords, and account information. This stolen data wasn't kept local; it was concealed on encrypted servers in both Eastern Europe and the United States.

The illicit haul wasn't for personal use. Gonzalez and his crew allegedly sold the stolen data on the internet to a network of criminals in the U.S. and Eastern Europe, effectively turning financial information into liquid cash. The scope of the operation extended beyond TJX. In May 2008, Gonzalez and his associates faced separate charges in the Eastern District of New York, accused of hacking into the Dave & Buster’s restaurant chain and pilfering card details from at least 11 locations.

U.S. Secret Service Director Mark Sullivan emphasized the evolving challenges of combating cybercrime. “Technology has forever changed the way we do business, virtually erasing geographic boundaries,” Sullivan stated. “However, this case demonstrates that even in the cyber world, there is no such thing as anonymity.” He highlighted the crucial role of international cooperation, noting the involvement of over a dozen law enforcement agencies worldwide. Assistant Director Michael Merritt added that the Secret Service is constantly adapting its methods to address increasingly complex network intrusion cases.

Founded in 1865 to combat counterfeiting, the U.S. Secret Service has broadened its focus to encompass financial crimes, and now, a leading role in the fight against cybercrime. The agency is forging partnerships with law enforcement, businesses, and academic institutions to protect critical infrastructure and combat internet intrusions. While the Gonzalez case represents a significant victory, it’s a stark warning that the battle against cybercriminals is far from over. The sheer scale of the fraud underscores the vulnerability of financial systems and the constant need for vigilance.

Source: https://www.secretservice.gov/newsroom/releases/2009/09/key-defendant-pleads-guilty-secret-services-tjx-case