Justin Mills, Trafficking in Stolen Identification Information, New York 2013

Manhattan U.S. Attorney Preet Bharara announced that Justin Mills was sentenced to six years in prison for trafficking in tens of thousands of access devices, including stolen credit card numbers and stolen login information for online accounts at Paypal and other financial websites.

Mills, 20, of Smyrna, Delaware, was arrested in June 2012 as part of 'Operation Card Shop,' an international law enforcement operation in which 30 defendants were ultimately arrested in 13 countries for their involvement in various 'carding' crimes.

According to the Information, the Complaint previously filed in the case, and statements made during today's sentencing proceeding, Mills used malicious software to steal usernames and passwords from Internet users that could be used to access various types of online accounts, including financial accounts at banks and online payment services such as Paypal.

Mills trafficked in this stolen login information, advertising to others on the UC Site that he had login information for well over 100,000 online accounts for sale, including accounts at Amazon, Facebook, Ebay, and other popular websites.

A search of Mills' computer following his arrest recovered login information for 15,000 Paypal accounts alone, along with login information for tens of thousands of online accounts associated with other online services.

In addition to the prison term, Judge P. Kevin Castel sentenced Mills to three years of supervised release. Mills was also ordered to pay restitution and forfeiture of $50,000.

Source: https://www.justice.gov/usao-sdny/pr/delaware-resident-sentenced-manhattan-federal-court-six-years-prison-trafficking-stolen