Three men are facing an indictment for being members of an international cybercrime ring that tried to steal at least $15 million by hacking into U.S. customer accounts at 14 financial institutions and the Department of Defense’s payroll service, federal prosecutors said.
Oleksiy Sharapka, 33, and Leonid Yanovitsky, 39, both of Kiev, Ukraine; and Richard Gundersen, 47, of Brooklyn, NY, ended up indicted on charges of conspiracy to commit wire fraud, conspiracy to commit access device fraud and identity theft, and aggravated identity theft.
The men were among eight people charged, according to U.S. Attorney Paul Fishman in New Jersey, who announced the indictments.
Fishman said the hacked computer networks belonged to Aon Hewitt, Automatic Data Processing Inc, Citibank NA, eBay Inc’s PayPal, Electronic Payments Inc, Fundtech Holdings LLC, iPayment Inc, JPMorgan Chase Bank NA, Nordstrom Bank, TD Ameritrade, TIAA-CREF, USAA, Veracity Payment Solutions Inc, and the Defense Department’s finance and accounting service.
Prosecutors accused the men of gaining unauthorized access to the networks, diverting customer funds to bank accounts and pre-paid debit cards, employing “cashers” to make ATM withdrawals and fraudulent purchases in Georgia, Illinois, Massachusetts, New York and elsewhere.
These conspirators also stand accused of using stolen identities to file false tax returns seeking refunds with the Internal Revenue Service.
The scheme ran from around March 2012, after Sharapka ended up deported after serving nearly 7.5 years in federal prison in Massachusetts, to around June 2013, according to court records.
Prosecutors said Sharapka ran the conspiracy with help from Yanovitsky, and Gundersen helped move fraud proceeds. Each faces up to 20 years in prison on the wire fraud conspiracy count.
The Ukrainian defendants remain at large, while Gundersen will appear in court at a later date. Gundersen’s lawyer did not immediately respond to requests for comment.
Charges against one of the other defendants, Ilya Ostapyuk of Brooklyn, ended up dismissed in September, court records show. The other four defendants either pleaded guilty or still face charges, a spokesman for Fishman said.