111 arrested in massive ID theft bust

Restaurant workers and bank insiders are charged in what's billed as the largest-ever ID theft round-up

By Robert McMillan, IDG News Service |  Security 2 comments

Prosecutors call it the biggest identity theft bust in U.S. history. On Friday, 111 bank tellers, retail workers, waiters and alleged criminals were charged with running a credit-card-stealing organization that stole more than US$13 million in less than a year-and-a-half.

"This is by far the largest -- and certainly among the most sophisticated -- identity theft/credit card fraud cases that law enforcement has come across," the Queens County District Attorney's office said in a statement announcing the arrests.

The credit card numbers came from far and wide: from skimming operations in the U.S., where restaurant employees or retail cashiers were paid to steal credit card data from customers; from carder forums on the Internet; and also from shady overseas suppliers in countries such as Russia, China and Libya.

In all, five groups of criminals were targeted in the two-year law enforcement operation, dubbed "Operation Swiper." Together, they ran the full gamut of criminal activities required to steal credit card numbers and convert that data into cash, prosecutors said.

Eighty-six of the defendants are in custody; police are looking for the remaining 25, prosecutors said.

The accused are charged with running a thoroughly modern identity theft ring that included ID thieves, skimmers, card makers, fences and shopping crews: groups that would buy thousands of dollars worth of merchandise in stores throughout the U.S.

"Many of the defendants charged today are accused of going on nationwide shopping sprees, staying at five-star hotels, renting luxury automobiles and private jets, and purchasing tens of thousands of dollars worth of high-end electronics," the Queens DA office said.

During a raid earlier this week, police seized "a box truck full of electronics, computers, shoes and watches, skimmers, card readers, embossers and various amounts of raw material, such as blank credit cards and fake identifications," the DA's office said.

Six of the accused are charged with stealing $850,000 worth of computer equipment from a Citigroup building in Long Island City last August. Prosecutors say that a former Citi employee, Steven Oluwo, and a security guard under contract to Citigroup, Angel Quinones, helped with the theft.

Apple, Best Buy, Nordstrom, Macy's and many financial institutions, including Citi, Chase Bank and Bank of America, are credited with helping with the investigation.

Robert McMillan covers computer security and general technology breaking news for The IDG News Service. Follow Robert on Twitter at @bobmcmillan. Robert's e-mail address is robert_mcmillan@idg.com

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question