Robert Siciliano discusses a global hacking ring that stole over 40 million credit card numbers and was busted. He covers the arrests, why hackers did it, and what consumers should do: monitor statements, set fraud alerts, and treat security as ongoing.
Chapters
Thanks, Marcy. Officials are saying that they have cracked the largest case of ID theft in U.S. history. 11 people have been charged in the theft of more than 40 million credit and debit card account numbers. The information was stolen from a number of retailers, including the company that operates Winners and HomeSense stores in Canada. For more, I'm joined in Boston by identity theft expert Robert Siciliano. Siciliano, sorry about that, a little early in the morning. Good to talk to you.
Good morning.
How were the hackers found?
They actually— one of them had been caught, a hacker in Miami. Some way, somehow, they got him, and he eventually worked with the FBI and ratted out his cohorts.
And that's what happens these days, as I understand it, right? I mean, if you isolate one, you can, you know, they'll squeal.
Well, you give them an opportunity to reduce their jail time, and this guy's facing a lifetime sentence. And so he was able to reduce his jail time by letting law enforcement know who did it. He worked with them undercover for a period of time, and eventually they caught the rest of them.
And Robert, in your experience too, I mean, the motivation for hackers has changed now. I mean, it used to be that you were after, I guess, a certain degree of notoriety or fame, but now the motivation is big money.
Big time. They were previously searching fun and fame. Now it's financial gain, and they're actually making more money now than the illegal drug trade. Organized web mobs throughout the world are all banding together, web mobs, and they are making billions and billions of dollars every single year right now.
So the 11 charged include 3 U.S. citizens, 3 people from Ukraine, 2 from China, 1 from Estonia, 1 from Belarus. This is a global operation.
Yeah, and it's amazing to me that the FBI was able to corral other government agencies throughout the globe and get their cooperation in, you know, prosecuting these individuals. You know, it's really about time.
Robert, what happens to the customers then that are involved in identity theft cases like this? I mean, some people may not even be aware right now that they were a victim, correct?
That is correct. Now, most of the retailers that have been victimized, this has been over the past few years. Many of them discovered their breaches as many as 2 and 3 years ago, so those cardholders may have already been made aware that their information was compromised and then reissued new cards. However, it's very important that all cardholders, everyone, regardless of a breach, pay pay close attention to credit card statements every single month.
Agreed. I mean, that's a good tip. Do you have any other tips for people out there?
I just think it's very important that every single month you pay close attention to your credit card statements. You scrutinize each and every charge, and also considering getting fraud alerts on your credit so that no new accounts can be opened up under your name without your authorization.
Robert Siciliano, tell me, I mean, how could this have been prevented? Are we keeping— in your mind, are we keeping up with the technology, the hacking technology that they use?
The speed of technology has far outpaced the necessary safety and security to keep all of our information safe. And there is nothing— there is no such thing as a 100% secure database. The information will always be vulnerable.
So all we can do is just try and catch up, try and keep up, huh?
That's really all you can do. You know, security is a journey. It's not a destination. It's not a place you ever arrive to.
Okay. All right. Robert Siciliano, thank you very much for your time. Appreciate it.
