20 Years For Gonzalez In TJX Hacker Case
alphadogg writes "Hacker mastermind Albert Gonzalez was sentenced Thursday in US District Court to two concurrent 20-year stints in prison for his role in what prosecutors called the 'unparalleled' theft of millions of credit card numbers from major US retailers. US District Court Judge Patti B. Saris announced the concurrent sentences in two 2008 cases against Gonzalez, 28, a Cuban-American who was born in Miami, where he lived when the crimes were committed. Gonzalez and co-conspirators hacked into computer systems and stole credit card information from TJX, Office Max, DSW and Dave and Buster's, among other online retail outlets, in one of the largest — if not the largest — cybercrime operations targeting that sort of data thus far. They then sold the numbers to other criminals. Gonzalez pleaded guilty to conspiracy charges in two cases related to those thefts last December and the following day entered a guilty plea in a third case involving hacking into computer networks of Heartland Payment Systems and the Hannaford Supermarkets and 7-Eleven chains."
I misread the first line as "Alberto Gonzalez".
One can still dream though.
We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
So where is the crime if nothing was compromised?
I know reading the link is frowned upon in here, but the actual credit card numbers were lifted. Plus (FTA), "It also appears that those behind the breach "made off with the gold" by intercepting and stealing the so-called Track 2 data from the magnetic stripe on the back of cards, which is all that's needed to create counterfeit cards"
What's missing here is the fact that TJX didn't take reasonable precautions to protect the data.
They already coughed up $41m to Visa and the FTC received a chunk of change from them as well.
The only way these kinds of thefts will be stopped is if these companies get serious about protecting Credit Card and Personal information. While PCI goes a long way in trying to address the Credit Card side of things, the Personal Information problem is still looming. We need tougher laws that make companies who gather sensitive information, SSNs etc. fully accountable when theft of the data in their possession occurs.
All in all, I still bet this guy has about $10m buried someplace but still 20 years of your life is a very stiff sentence considering a plea bargain as well.
Harrison's Postulate - "For every action there is an equal and opposite criticism"
You'll get less for murder.
Most murders are committed in the heat of passion by mentally unbalanced people. This guy rationally and knowingly RUINED many people's lives. He can rot in prison for all I care.