An Ontario, Canada, man appeared in court Monday facing charges of running a website that collected personal and password data from three billion accounts, which he then turned around and sold.
Jordan Evan Bloom, 27, of Thornhill earned some $247,000 Canadian by selling the data for a “small fee” via leakedsource.com, the Royal Canadian Mounted Police said.
The information was stolen during massive hacks of websites including LinkedIn and the Ashley Madison online dating service.
“If I was able to determine your password, I’d have your password associated to your email and then, knowing that we, as humans, use passwords across other sites, I’d be potentially able to go to any site … and have access to those websites,” said RCMP Staff Sgt. Maurizio Rosa. “We want Canadians to be aware there are criminals out there trying to monetize the use of their information to achieve nefarious results.”
Bloom was charged in December as part of a criminal probe dubbed “Project Adoration” focusing on trafficking in personal data, unauthorized use of computers, and possession of illicitly obtained property.
The probe lasted more than a year.
Authorities shut down Bloom’s website, but another with the same domain name hosted by servers in Russia is still operating.
“The RCMP will continue to work diligently with our domestic and international law enforcement partners to prosecute online criminality,” said inspector Rafael Alvarado.
Police said assistance from the Dutch National Police and the FBI were “essential” to the investigation.