Alleged Dave & Buster's Hackers Busted

May 12, 2008— -- A federal grand jury has indicted the alleged hackers thought to be behind one of the world's biggest stolen credit card numbers rings, according to court records unsealed today in New York.

The 27-count indictment, returned by the grand jury in March, charges Maksym Yastremskiy of Kharkov, Ukraine, and Aleksandr Suvorov from Estonia with conspiracy to commit wire fraud, wire fraud, aggravated identity theft, and conspiracy to commit computer fraud, for hacking into the computer systems at Dave & Buster's restaurants in the United States.

Authorities say the alleged hackers obtained more than 5,000 customer credit card numbers, which they then used to make fraudulent purchases around the world using software called "packet sniffers," which vacuumed up card data used at the restaurant and arcade chain.

A criminal complaint also charged Albert Gonzalez, aka "Segvec" and "SoupNazi," of Miami with wire fraud conspiracy related to the criminal scheme. According to the complaint, Internet chat room conversations indicate Gonzalez provided the sniffer software used to intercept the credit and debit card numbers.

According to the court records, Yastremskiy, aka "Maksik," and Suvorov, aka "JonnyHell," installed the "packet sniffer" software, which was designed to intercept networked computer transmissions, onto Dave & Buster's computers.

Yastremskiy and Suvorov allegedly gained entry into 11 of the company's cash registers that were linked to point of sale (POS) computer servers, including servers in Arundel, Md., and Islandia, N.Y. The POS computer servers collect and transmit the card numbers, expiration dates and security code data to the company's headquarters, and they are then verified through a third party vendor that validates the information.

From May 2007 to September 2007, the hackers allegedly obtained about 5,100 Visa and MasterCard numbers and 32 American Express numbers from their software.