A British man is under indictment for hacking into multiple U.S. government computers and stealing thousands of employee financial records.
Lauri Love, 29, of Stradishall, England, is facing charges of conspiracy, causing damage to a protected computer, access device fraud and aggravated identity theft, the FBI said. A federal grand jury handed up the indictment in the Eastern District of Virginia.
Beginning in 2012, Love and his conspirators face charges of accessing computers at the Energy and Health and Human Services departments and FBI by exploiting a vulnerability in the Adobe ColdFusion program, which builds and administers websites.
They fixed the vulnerability, the FBI said, but not before Love bypassed security credentials on protected computers and obtained administrator-level access. That allowed him to upload and download files, as well as create, edit, remove and search for data, authorities said.
Love and his conspirators obtained “massive amounts of sensitive and confidential information stored on those computers, including more than 100,000 employee records with names, Social Security numbers, addresses, phone numbers and salary information, along with more than 100,000 financial records, including credit card numbers and names,” the FBI said.
He faces a maximum penalty of 10 years in prison, if convicted, plus an additional mandatory two years if convicted of aggravated identity theft.
Click here to read the FBI statement.