TJX hacker gets 20 years in prison in Heartland case

Article

TJX hacker gets 20 years in prison in Heartland case

A federal judge on Friday sentenced Albert Gonzalez to 20 years in prison for his involvement in a series of massive data security breaches into Heartland Payment Systems Inc. and other companies.

On Thursday, he was sentenced to 20 years in prison

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

for his role in the theft and sale of millions of credit and debit cards from TJX Companies Inc. and other retailers. He is to serve the two sentences concurrently, according to a court spokeswoman.

In December, Albert Gonzalez, 28, of Miami pleaded guilty in federal court in Boston to conspiring to hack into computer networks operated by Heartland Payment Systems, a payment processor, 7-Eleven Inc., Hannaford Brothers Co., and other retailers.

A federal grand jury indicted Gonzalez and two Russian hackers last August in the case involving Heartland; more than 130 million credit and debit card numbers from five companies were stolen in what officials called the largest credit and debit card data breach ever charged in the U.S.

According to the indictment, the trio researched the credit and debit card systems used by the companies and used SQL injection attacks to bypass network firewalls to steal the data. Prosecutors said the trio used a number of techniques to hide their activity, including testing their malware against antivirus products to evade detection.