Man charged in record ID theft case in plea talks

MIAMI -- An accused computer hacker charged in what prosecutors call the largest cases of identity theft in U.S. history has been negotiating a plea deal with the federal government, people close to the case said Thursday.

Albert Gonzalez, who once helped the U.S. Secret Service hunt hackers, has been weighing a deal to plead guilty on two of the three cases against him, two people told The Associated Press. They spoke on condition of anonymity because they were not authorized to discuss the plea talks.

Gonzalez, 28, is charged with swiping the credit and debit card numbers of more than 170 million accounts.

Gonzalez' lawyer, Rene Palomino Jr. of Miami, said that he is "intending to finalize the case as early as Friday."

"My client is extremely remorseful as to what has happened," Palomino told the AP Thursday.

The two sides are working on a plea that would resolve charges filed against Gonzalez in New York and Boston. When the Boston charges were filed last year, prosecutors called it the largest single corporate identity theft ever: stealing the details of some 40 million accounts.

Yet even after he was jailed, authorities continued to unravel his alleged scams. Earlier this month, federal prosecutors in New Jersey filed new charges against Gonzalez, accusing him of a separate identity theft swindle that dwarfed the others: some 130 million customer accounts.

Gonzalez was arrested in 2003 for hacking but not charged because authorities said he became a Secret Service informant.

Over the next five years, authorities said, Gonzalez continued to hack into the computer systems of Fortune 500 companies even while providing assistance to the government. A judge allowed him to move from New Jersey back to Florida in 2004, and court documents alleged that Gonzalez hacked into the national restaurant chain Dave & Buster's.

He was arrested again in 2008 in Miami, as he was staying at a luxury hotel on the beach.

Officials said Gonzalez devised a sophisticated attack to penetrate computer networks, steal credit and debit card data, and send that information to computer servers in California, Illinois, Latvia, the Netherlands and Ukraine.