Atlantic Business Channel

« Recession Roundup: Producer Prices, Housing Starts Decline | Main | Credit Card Changes Begin, Market Changing Too »

Aug 18 2009, 10:25 am

How Do You Steal 130 Million Credit Card Numbers?

A Miami man and two Russian accomplices are being indicted for allegedly stealing 130 million credit card numbers, the largest identity theft in history. That's a lot of credit card numbers -- like, one for every housing unit in the United States. How did they do it?

The historic theft involved five corporate data hackings, between 2006 and 2008, including Heartland, Hannaford, 7-Eleven and two unnamed companies, according to Channel Web. US investigators say the team scanned lists of Fortune 500 companies and learned about their checkout counter machines (also known as point-of-sale systems). Then they would write specific codes to corrupt their data systems and launch a virus from computers in the United States and Europe to pull hundreds and thousands of credit card numbers, and sort through them using a "sniffer," which is basically a data analysis system that decodes big chunks of information.

So how much damage could these kind of hackings do? The group leader is already being prosecuted for stealing another 40 million credit card numbers from TJ Maxx and Marshall's retailers, in a plot that has allegedly cost the companies about $400 million, according to the Washington Post.

For those interested in reading about how companies like 7-11 and Heartland Payment Systems (Slogan: "The Highest Standards; The Most Trusted Transactions") PC World has some interesting thoughts here.

Comments (3)

"Then they would write specific codes to corrupt their data systems"

I'm a programmer, and I have absolutely no idea what you mean with the above phrase. Please amplify or correct. Either there was a programmer on the inside inserting code into the POS programs or the outside data network transmitting data BETWEEN systems was vulnerable to being "sniffed". Best that articles purporting to be technical be fact checked by the technically literate.

The Debt Gazette

Hopefully Mr. Gonzalez's actions can have a beneficial effect. Companies can learn to better protect our sensitive information, and consumers can learn just how vigilant they need to be in regards to their finances. It might be a lot to ask, but I think some good can come from this.

Of course its hard when it oftentimes seem like our best and brightest minds would rather go into the criminal side of the computing world, than the legitimate one.

Check out my blog on Mr. Gonzalez and his actions at.... http://www.thedebtgazette.com/2009/08/miami-hacker-creditcards/