Russian Man Extradited To US For Heartland, Dow Jones Cyberattacks

itwbennett writes: A Russian man accused of high-profile cyberattacks on Nasdaq, Dow Jones, Heartland Payment Systems and 7-Eleven has been extradited to the U.S. and appeared in court in Newark, New Jersey on Tuesday. Vladimir Drinkman, 34, of Syktyykar and Moscow, Russia was charged for his alleged role in a data theft conspiracy that targeted major corporate networks and stole more than 160 million credit card numbers, the U.S. Department of Justice said in a press release. Drinkman appeared Tuesday in U.S. District Court for the District of New Jersey and entered a plea of not guilty to the 11 counts he faces. His trial is scheduled to begin in April.

Comments

Extradition?

[DoofusOfDeath]

I couldn't tell from the story - was he actually extradited by Russia? If so, I'm really surprised they're welling to extradite anyone to us these days.

Re:Extradition?

[mentil]

TFA makes clear that he was arrested/detained in The Netherlands, so he was presumably extradited from there.

Re:Extradition?

[hcs_$reboot]

I think you owe me an apology.

You must be new here.

Re:Expanding jurisdictions

[Anonymous Coward]

While not a fan of anything much the US does. The US did not arrest him, he was arrested elsewhere, the US has to prove a case is valid in the local courts for extradition to occur. This is EXACTLY how things should be working, assuming no corruption was involved in the extradition trial.

Re:Expanding jurisdictions

[Anonymous Coward]

I suggest you go and inform yourself, the agreements are NOT the same, the Netherlands requires the extradition to be reviewed under dutch laws by a dutch court. The dutch have refused extraditions from the US before on grounds that the case is without merit or that they believe the person will be mistreated by US system.

Shared responsibilities

[hcs_$reboot]

"The hackers often gained initial entry through an SQL injection attack" (TFA) SQL injection? Shouldn't the "victims" be prosecuted also, for poor IT management?

Re:Shared responsibilities

[Anonymous Coward]

A more apt comparison would be arresting a surgeon for failing to stitch up his patient.

Re:Shared responsibilities

[hcs_$reboot]

Yeah guy who forgets to lock his door or even is careless to never lock hiis door should be also prosecuted when his hows id burgled.

We are not talking about locking a door, we're talking about implementing basic IT security. Locking your door is not a job. Implementing security is. When a web site fails the basic SQL injection test, the first thing a hacker looks at, there is clearly a problem at all steps of the site development.

Re:Shared responsibilities

[Przemo-c]

I know that it has to be done properly and injection test are the first to do but treating person that hacked into a system on the same level as people resposible for security is absurd. There should be ramifications for them but prosecution?

Re:Expanding jurisdictions

[Anonymous Coward]

No they aren't the same (though many are based on the same European extradition agreement). most countries do not just rubber stamp US requests like the UK does.

Re:Expanding jurisdictions

[St.Creed]

I misclicked and mismoderated your comment. Undo.

On-topic: not only that, but in this specific case there was also an extradition request from Russia which was quite strange, which ensured that the entire case was covered in the national media. There was a lot of suspicion that the extradition request from Russia was just to ensure he could get out of jail, using his ill-gotten profits to buy himself off.