Network Security News

Hacker in Heartland data breach a 'fall guy' for Russians?

Monday, August 24, 2009

IT security experts are suggesting that 28-year-old Albert Gonzales, who was indicted last week for involvement in the massive data breach of Heartland Payment Systems, may just be a fall guy for more expert hackers who have escaped justice in Russia.

Gonzales was charged last Monday with conspiracy and wire fraud for involvement along with two unnamed Russian co-conspirators hacking the network firewalls of Heartland Payment Systems, along with retail chains 7-Eleven and Hannaford Brothers.

Gonzales was already in custody and facing trial in two other hacking cases for data theft from TJX and another retailer.

But security experts say Gonzales may have just been "the tip of the iceberg" and not the real mastermind behind the attacks, who are likely connected to criminal gangs in Russia and elsewhere in Eastern Europe.

Writing at the Trend Micro malware blog, security researcher Paul Ferguson said there is "an entire Eastern European organized criminal operation that is further along in this food chain."

Richard Koman, writing for ZDNet, said Gonzales may have been "a low-level purveyor of data" who was used by the Russians for "scope-out work" to locate the vulnerabilities exploited by the other hackers.