Identity Theft Speaker Expert; Chertoff: Control of identity critical in 21st century

Identity Theft Expert Speaker Robert Siciliano www.IDTheftSecurity.com; Chertoff: Control of identity critical in 21st century

Chertoff states; “I’m going to submit to you that in the 21st Century, the most important asset that we have to protect as individuals and as part of our nation is the control of our identity, who we are, how we identify ourselves, whether other people are permitted to masquerade and pretend to be us, and thereby damage our livelihood, damage our assets, damage our reputation, damage our standing in our community.”

Chertoff was the single brightest light in the Bush administration. He will be sorely missed. The statement above has been posted to my homepage as a graphic here www.IDTheftSecurity.com I encourage you to steal it from my homepage and post it everywhere.

We are functioning in an environment in which we have yet to be identified or authenticated. There are hundreds of forms of identification in circulation with little security, the social security number is a national ID available everywhere see here, there are thousands of variations of the birth certificate, there are kids on college campuses everywhere selling fake IDs and credit is wide open.

All of this contributes to the exasperating problem of identity theft. It will only get worse and it wont get better until there is a degree of accountability. Accountability begins with identifying and authenticating the borrower/citizen etc.

The controversial Real ID Act is flawed. So is Microsoft’s operating system. So are airbags. But we use them because they work, and they offer a degree of security and functionality that we need. Real ID is a step in the right direction.

Smart-cards, biometrics in all its forms, multi-factor authentication, whatever it takes. We need to be properly identified. And to all those that say “at what cost, civil liberties, privacy?”, oh please. You already gave up all your privacy for 10% off at that shoe store. Privacy is dead. Move on. Our only concern is to manage our circumstances and begin to securely identify and authenticate.

Privacy advocates and politicians who fight Real ID do so because they are ill-informed and/or grandstanding. The day will come when we all are properly identified. And until that day, millions and millions of people will suffer at the hands of criminals because of an utter lack of accountability.

Her is an example of a country doing it right, its not perfect, but it certainly trumps what we have in North America and most of the civilized world. http://www.emiratesid.ae/mainenglish.html.

Heres a video discussing the use of the social security number as a primary ID;

Identity Theft Speaker; Cybercrime cost firms $1 trillion globally

Identity Theft Expert and Speaker Robert Siciliano www.IDTheftSecurity.com McAfee; Cybercrime cost firms $1 trillion globally

In the late 90’s and early 2000’s, hackers hacked because it made them popular among their hacker peeps. They hacked for the challenge, fun and fame. Soon after the public started spending more time online, shopping, banking, using their PC for managing personal affairs. Now hackers aren’t just wreaking havoc, deleting files or making IT administrators miserable, they’re stealing lots of proprietary data. No longer fun and fame, the real game is illegal financial gain.

Hackers changed their motivation, which means you need to change your perceptions of what a computer is and how to operate it. It’s no longer something you just play Solitaire on. Or a place where you socialize and have friends. It’s a cash register to a hacker. It’s a bank. And it should be treated and respected like a vault.

Identity Theft Expert Speaker; VA agrees to pay $20 million to veterans in 2006 data breach

Identity Theft Expert Speaker; Robert Siciliano www.IDTheftSecurity.com VA agrees to pay $20 million to veterans in 2006 data breach

Government is paying up regarding a stolen laptop from 2 years ago. A laptop computer was stolen from the home of a Veterans Administration employee and had 26.5 million names addresses and social security numbers of veterans and their families. Thats almost 10% of the population on one $1000.00 computer with a 30 gb hard drive.

The laptop was later recovered, however the damage was done.

The cost of the theft is much more than $20 million. Do the math. For this breach its less than a buck per name lost, not taking into account all the money spent investigating the loss.

As laptops get faster smaller and cheaper this will continue to happen. Why? Because those who are responsible for the devices do not follow whatever policies may or may not be in place to secure them and/or encrypt the data on them.

And for 10 bucks a month any entity can at least install laptop tracking and recovery software such as www.MyLaptopGPS.com

Below is a youtube vid of an appearance on the Today Show where another major corporation was lax in their security and compromised a couple hundred thousand records.

Identity Theft Protection Expert: Examine credit card statements

100 million and possibly more credit/debit cards breached in the largest data breach in the world ever. Bravo. Brilliant. High five and congratulations to the hackers where ever they may be. I’m not proud, but certainly impressed.

How does this happen? Flaws in the system of designing software, old technologies used for new transactions, unsecured networks, inside jobs, etc, list goes on and on and on. The real reason is retailers and others have to be PCI compliant, which in itself is good, but does not solve the problem of credit card fraud. Until PCI adopts solutions that solve credit card fraud then we will still be amazed when 100 million cards are stolen. When industry adopts a secure solution (and they do exist), then data breaches of this kind will be a non-issue.

Robert Siciliano www.IDTheftSecurity.com Identity Theft Speaker and Expert on Personal Security.

ARTICLE HERE:
Expert: Examine credit card statements
Firm that processes millions of transactions sees its computer system breached
BY ANDY PIPER TH STAFF WRITER

Identity Theft Expert and MyLaptopGPS Note the New Variables Brought to Laptop Theft Security by Ultraportable Computers

(BOSTON, Mass. – Jan. 15, 2009 – IDTheftSecurity.com) As reports in late December indicated that laptop computer sales exceeded those of desktop computers, the rise of so-called "ultraportable" laptops became news, as well. Smaller than the typical laptop computer, ultraportables amplify the mobile computing security concerns, noted widely televised and quoted personal security and identity theft expert Robert Siciliano. Laptop tracking and data retrieval technology from MyLaptopGPS nevertheless hold much promise in mitigating the risks, he said.

"As technology hardware continues to shrink in size, the challenge to secure it grows," said Siciliano. "Laptop theft is a concern largely because of laptop computers’ compact packaging. With ultraportable laptops, this concern exacerbates. Ultraportables, which render all the reasons to use laptop computers even more alluring, are sure to allure laptop thieves, as well, and in even greater numbers. It is incumbent upon organizations of all kinds to equip all such devices with effective anti-laptop theft technology."

CEO of IDTheftSecurity.com and a member of the Bank Fraud & IT Security Report‘s editorial board, Siciliano leads Fortune 500 companies and their clients through presentations that explore security solutions for businesses and individuals. Author of "The Safety Minute: 01" and a longtime identity theft speaker, he has discussed data security and consumer protection on CNBC, NBC’s "Today Show," FOX News Network, and elsewhere.

Shipments of laptop computers surpassed those of desktops in Q3 2008 by a very small percentage, according to research cited by eFluxMedia on Dec. 24. Industry analysts had expected the news, the article reported.

Two days earlier, Computerworld surveyed the rising popularity of ultraportable computers — technically laptop computers, but significantly smaller. For instance, their size forces ultraportable laptops to run previous-generation operating systems and less robust security technology technologies, reported Computerworld, which noted the attendant concerns these factors pose. Ultraportable laptop computers’ inferiorities, according to the article, make data stored on these devices more susceptible to security hazards because of a diminished capability to employ encryption, for instance.

"Calls to instruct employees not to place sensitive data on ultraportable laptop computers are well-meaning but futile," said MyLaptopGPS’ chief technology officer, Dan Yost, who invited readers to visit the MyLaptopGPS blog. "Identifying data records will find their way onto ultraportables. But organizations can nevertheless keep tabs on these devices. MyLaptopGPS features such as SafeTags, for example, can secure ultraportables by rendering them police-traceable in the event of laptop loss or theft."

The theft rate for laptop computers equipped with MyLaptopGPS is just 0.4 percent, or 32 times lower than the average. Additionally, Yost pointed to SafeRegistry™, a comprehensive system from MyLaptopGPS for inventorying entire fleets of mobile computers, as well as a full line of highly renowned SafeTags™, which are police-traceable property tags designed to secure iPods™, cell phones, BlackBerry™ devices and other mobile property.

Yost’s expertise has been featured twice in CXO Europe. Furthermore, in December of 2008, he and Siciliano co-delivered a presentation titled "Information in the Modern Age: Maintaining Privacy in an Era of Medical Record Identity Theft" at the 4th Annual World Healthcare Innovation & Technology Congress in Washington, D.C., where Former U.S. Congressman Newt Gingrich delivered the keynote address.

Readers who belong to LinkedIn® are encouraged to join the MyLaptopGPS group there. Featured in Inc. Magazine and TechRepublic, MyLaptopGPS maintains the Realtime Estimated Damage Index (REDI™), a running tally of highly publicized laptop and desktop computer thefts and losses and these losses’ associated costs. A log of these high-profile laptop thefts is available at MyLaptopGPS’ website.

Readers may download a demo of MyLaptopGPS. A white paper is also available.

MyLaptopGPS combines Internet-based GPS tracking with other functionalities to secure mobile computing devices. A user launches MyLaptopGPS’ features remotely, protecting data even while the machine is in a criminal’s hands. Once connected to the Internet, the software silently retrieves and then deletes files from machines as it tracks the stolen or missing hardware — at once returning the data to its rightful owner and removing it from the lost mobile computing device.

The YouTube video below shows Siciliano on a local FOX News affiliate discussing the importance of securing mobile computing devices on college campuses, where laptop theft can run rampant. To learn more about identity theft, a major concern for anyone who’s lost a laptop computer or other mobile computing device to thieves, readers may go to video of Siciliano at VideoJug.

###

About MyLaptopGPS

Since 1984, Tri-8, Inc. (DBA MyLaptopGPS.com) has specialized in complete system integration. From real-time electronic payment processing software to renowned mid-market ERP implementations, the executive team at MyLaptopGPS has been serving leading enterprises and implementing world-class data systems that simply work. With MyLaptopGPS™, Tri-8, Inc. brings a level of expertise, dedication, knowledge and service that is unmatched. MyLaptopGPS™’s rock-solid performance, security, and reliability flow directly from the company’s commitment to top-notch software products and services for almost 25 years.

About IDTheftSecurity.com

Identity theft affects us all, and Robert Siciliano, CEO of IDTheftSecurity.com and member of the Bank Fraud & IT Security Report‘s editorial board, makes it his mission to educate Fortune 500 companies and their clients. A leader of personal safety and security seminars nationwide, Siciliano has been featured on "The Today Show," CNN, MSNBC, CNBC, "FOX News," "The Suze Orman Show," "The Montel Williams Show," "Maury Povich," "Sally Jesse Raphael," "The Howard Stern Show," and "Inside Edition." Numerous magazines, print news outlets, and wire services have turned to him, as well, for expert commentary on personal security and identity theft. These include Forbes, USA Today, Entrepreneur, Woman’s Day, Mademoiselle, Good Housekeeping, The New York Times, Los Angeles Times, Washington Times, The Washington Post, Chicago Tribune, United Press International, Reuters, and others. For more information, visit Siciliano’s Web site, blog, and YouTube page.

The media are encouraged to get in touch with any of the following individuals:

John Dunivan
MyLaptopGPS Media Relations
PHONE: (405) 747-6654 (direct line)
jd@MyLaptopGPS.com
www.MyLaptopGPS.com

Robert Siciliano, Personal Security Expert
CEO of IDTheftSecurity.com
PHONE: 888-SICILIANO (742-4542)
FAX: 877-2-FAX-NOW (232-9669)
Robert@IDTheftSecurity.com
www.idtheftsecurity.com

Brent W. Skinner
President & CEO of STETrevisions
PHONE: 617-875-4859
FAX: 866-663-6557
BrentSkinner@STETrevisions.com
http://www.STETrevisions.com
http://www.brentskinner.blogspot.com

Identity Theft Expert and MyLaptopGPS: Research on Financial Services Firms’ Data-Storing Practices Suggests Consequences of Laptop Theft Could be Severe

(BOSTON, Mass. – Jan. 14, 2009 – IDTheftSecurity.com) New research from PricewaterhouseCoopers LLP has revealed a number of worrisome trends in data security among financial services firms. The findings mean laptop computer security is as important as ever, according to widely televised and quoted personal security and identity theft expert Robert Siciliano. With the amount of data apparently left unaccounted for, laptop tracking and data retrieval technology from MyLaptopGPS can spell the difference between financial catastrophe and peace of mind, he said.

"The research suggests that more than half of financial services firms—perhaps the firms that ought be the most careful with data—don’t even know where data on customers and employees is collected," said Siciliano. "How can a firm make sure data is secure when it doesn’t even know where that data is? Much of the information surely makes its way onto laptops and other mobile computing devices, potentially the least secure of all destinations for data."

CEO of IDTheftSecurity.com and a member of the Bank Fraud & IT Security Report‘s editorial board, Siciliano leads Fortune 500 companies and their clients through presentations that explore security solutions for businesses and individuals. Author of "The Safety Minute: 01" and a longtime identity theft speaker, he has discussed data security and consumer protection on CNBC, NBC’s "Today Show," FOX News Network, and elsewhere.

According to an associated news release, findings from PricewaterhouseCoopers’ Global State of Information Security Survey® 2008 (conducted in conjunction with CIO and CSO magazines) suggested that more 54 percent of financial services firms do not have an accurate inventory of where personal data for employees and customers is collected, transmitted or stored. Furthermore, findings indicated that 51 percent do not require third-party service providers to comply with firms’ privacy policies, the news release also said.

"Securing and tracking mobile computing equipment is half the battle in data security," said MyLaptopGPS’ chief technology officer, Dan Yost, who invited readers to visit the MyLaptopGPS blog and discuss laptop security resolutions for 2009. "And this half of the battle will, in many cases, complement efforts to get a handle on the other half — securing and tracking the data, which includes knowing where it is."

The theft rate for laptop computers equipped with MyLaptopGPS is just 0.4 percent, or 32 times lower than the average. Additionally, Yost pointed to SafeRegistry™, a comprehensive system from MyLaptopGPS for inventorying entire fleets of mobile computers, as well as a full line of highly renowned SafeTags™, which are police-traceable property tags designed to secure iPods™, cell phones, BlackBerry™ devices and other mobile property.

Yost’s expertise has been featured twice in CXO Europe. Furthermore, in December of 2008, he and Siciliano co-delivered a presentation titled "Information in the Modern Age: Maintaining Privacy in an Era of Medical Record Identity Theft" at the 4th Annual World Healthcare Innovation & Technology Congress in Washington, D.C., where Former U.S. Congressman Newt Gingrich delivered the keynote address.

Readers who belong to LinkedIn® are encouraged to join MyLaptopGPS group there. Featured in Inc. Magazine and TechRepublic, MyLaptopGPS maintains the Realtime Estimated Damage Index (REDI™), a running tally of highly publicized laptop and desktop computer thefts and losses and these losses’ associated costs. A log of these high-profile laptop thefts is available at MyLaptopGPS’ website.

Readers may download a demo of MyLaptopGPS. A white paper is also available.

MyLaptopGPS combines Internet-based GPS tracking with other functionalities to secure mobile computing devices. A user launches MyLaptopGPS’ features remotely, protecting data even while the machine is in a criminal’s hands. Once connected to the Internet, the software silently retrieves and then deletes files from machines as it tracks the stolen or missing hardware — at once returning the data to its rightful owner and removing it from the lost mobile computing device.

The YouTube video below shows Siciliano on a local FOX News affiliate discussing the importance of securing mobile computing devices on college campuses, where laptop theft can run rampant. To learn more about identity theft, a major concern for anyone who’s lost a laptop computer or other mobile computing device to thieves, readers may go to video of Siciliano at VideoJug.

###

About MyLaptopGPS

Since 1984, Tri-8, Inc. (DBA MyLaptopGPS.com) has specialized in complete system integration. From real-time electronic payment processing software to renowned mid-market ERP implementations, the executive team at MyLaptopGPS has been serving leading enterprises and implementing world-class data systems that simply work. With MyLaptopGPS™, Tri-8, Inc. brings a level of expertise, dedication, knowledge and service that is unmatched. MyLaptopGPS™’s rock-solid performance, security, and reliability flow directly from the company’s commitment to top-notch software products and services for almost 25 years.

About IDTheftSecurity.com

Identity theft affects us all, and Robert Siciliano, CEO of IDTheftSecurity.com and member of the Bank Fraud & IT Security Report‘s editorial board, makes it his mission to educate Fortune 500 companies and their clients. A leader of personal safety and security seminars nationwide, Siciliano has been featured on "The Today Show," CNN, MSNBC, CNBC, "FOX News," "The Suze Orman Show," "The Montel Williams Show," "Maury Povich," "Sally Jesse Raphael," "The Howard Stern Show," and "Inside Edition." Numerous magazines, print news outlets, and wire services have turned to him, as well, for expert commentary on personal security and identity theft. These include Forbes, USA Today, Entrepreneur, Woman’s Day, Mademoiselle, Good Housekeeping, The New York Times, Los Angeles Times, Washington Times, The Washington Post, Chicago Tribune, United Press International, Reuters, and others. For more information, visit Siciliano’s Web site, blog, and YouTube page.

The media are encouraged to get in touch with any of the following individuals:

John Dunivan
MyLaptopGPS Media Relations
PHONE: (405) 747-6654 (direct line)
jd@MyLaptopGPS.com
www.MyLaptopGPS.com

Robert Siciliano, Personal Security Expert
CEO of IDTheftSecurity.com
PHONE: 888-SICILIANO (742-4542)
FAX: 877-2-FAX-NOW (232-9669)
Robert@IDTheftSecurity.com
www.idtheftsecurity.com

Brent W. Skinner
President & CEO of STETrevisions
PHONE: 617-875-4859
FAX: 866-663-6557
BrentSkinner@STETrevisions.com
http://www.STETrevisions.com
http://www.brentskinner.blogspot.com

Identity Theft Expert Speaker; Is Tracking Your Money Online Too Risky?

Identity Theft Expert Speaker Robert Siciliano www.IDTheftSecurity.com

Is Tracking Your Money Online Too Risky?
Mint, Wesabe Claim Security, Convenience
Charlie Triemert, Staff writer

Tim Johnson, 30, says he wanted to do a better job of organizing his family’s finances.
“I just wanted to see how much money we had. I have a Roth IRA and some investments from my grandparents. My wife and I both have 401(k) from our jobs. My wife has a substantial amount of 401(k) from her previous job, as well.”
Tired of the paper clutter, Johnson went out and purchased a version Intuit’s Quicken for around $50.
“It was a little expensive but it helped us gain a better perspective of our finances,” Johnson said.

With the economy in its current funk, more people are turning to online money management tools. Free financial software sites such as Mint, Moneycenter and Wesabe are enjoying an increase in users.

Mint’s founder and CEO, Aaron Pratzer, says more than 625,000 people currently use his budgeting and money management site.
The biggest obstacle for these free financial sites is assuring users that their information is safe and secure.
“I’ve heard a little bit about free financial software options, but I like knowing our information is safely stored on my computer at home,” Johnson said.

Are They Safe?
“There will always be an opportunity — whether from the inside or the outside — for a hacker to get in,” says Robert Siciliano, chief security analyst for OneYou, a Web site that protects consumers from identity theft.

Before entering any sensitive information onto a site, Siciliano says consumers should understand each site’s policies in the event there is a breach.

“It’s important to know who ultimately is responsible for any security failures and what their policy for retribution is,” he said.
On Mint, you never share your name or Social Security number. Also, there is an option that will send a text message if there is an expensive purchase made on your credit card.

“If anything, Mint will help you keep an eye on suspicious activity,” Pratzer said. Pratzer said that even in the event your account is accessed by someone else, the amount of damage they could inflict is minimal. “You can’t move money from account to account on Mint, so they wouldn’t be able to do much,” Pratzer said.

Siciliano said financial sites — whether they are free or not — are required to have the software and encryption methods to protect users.

“As a consumer, I would try my best to understand their revenue model and how they are paying for all that security,” he said.

Free And Accessible
Besides being free, Pratzer said, the best thing about his site, “is that allows you set a budget.

Moneycenter and Mint both allow users to create categories and subcategories for budgeting. Because all of your bills can be computed, users can set goals and the system will offer ways to help attain them.

One of the best features online financial sites offer is accessibility. With an Internet connection and a browser — or sometimes just a mobile phone — you can access all of your financial data.

Help With Taxes
With all your financial information in one place, filing your taxes is a whole lot easier.
“If you’re traveling to New York for business, Mint allows you print off all your business-related expenses, Pratzer said.
Because each site has their financial tools available online, there’s no downloading or software you have to deal with. You’ll always be dealing with their most updated version.

If you upload your credit card information into Mint.com’s system, it will calculate the amount of interest you’re paying and notify you if could save money with another credit card.

This is also how Mint pays for its services. But Pratzer said the system will give you the best rates results regardless of sponsorship.

Mint allows users to set their retirement goals and offers tools to help them reach it. “It’s sort of an automatic financial advisor,” Pratzer said.

Copyright 2008, Internet Broadcasting. This material may not be published, broadcast, rewritten or redistributed.

The story Is Tracking Your Money Online Too Risky? is provided by LifeWhile.

Identity Theft Expert Speaker ; Regulators:Thanks PCI, but we’ll take it from here

Identity Theft Expert Speaker Robert Siciliano www.IDTheftSecurity.com ; Regulators:Thanks PCI, but we’ll take it from here

Much has been said since PCIs inception. The following article does an excellent job of summarizing the crux of the issue. Unfortunately for the credit card industry and retailers as a whole, PCI is considered (and I believe) a self serving entity to stave off government intervention. Its hard to fathom that the end may be near for PCI due to their self serving image. While significant effort has been made to change the way data is processed, there has been a lack of effort regarding implementing technology’s necessary to identify, authenticate and and make all accountable for the credit they have been authorized.

Government intervention will be a good thing for PCI. Heres why, most government officials know nothing about security. Politicians as a whole are clueless regarding most issues they are confronted with and have staff to brief them on the issues. Key word “BRIEF”. Worse, they interpret everything based on how it can get them re-elected.

This all means that PCI will sit in front of congress answering stupid questions that they have to be prepared to answer. They will have to go beyond the call of duties to satisfy some of the dumbest people on earth. That will require incredible due diligence.

January 9, 2009 – 3:20 P.M.
Regulators:Thanks PCI, but we’ll take it from here
TAGS:data breaches, data security, PCI, regulators, retail security
IT TOPICS:Government & Regulation, Security

The Payment Card Industry Data Security Standard (PCI DSS) being pushed by the major credit card companies has probably done a lot to stave off state and federally mandated controls for protecting customer credit and debit card data up to now. The big question as a new year begins, is for how much longer though?

More than two years after the PCI standard went into broad effect, data breaches involving payment card data continue unabated. Obviously it would have been unrealistic for anyone to have expected them to stop altogether just because of PCI. And it’s impossible to know how many compromises were averted because of the standard.

Even so, the number of data compromises involving payment card data being disclosed by businesses is only increasing, not decreasing. One reason is simply that state breach notification laws are forcing companies to disclose compromises that in the past they might not have. Another is the continuing lack of visible enforcement of PCI which has resulted in an environment where many companies, including large ones, are still not fully compliant with the mandate.

And that’s a problem for those hoping that a private industry initiative such as PCI alone will be enough to keep lawmakers at bay for much longer.

Already Massachusetts and Nevada have passed laws requiring companies to encrypt all sensitive customer data and implement measures for controlling access to it. The Massachusetts law, which seems to have a lot of people anxiously reviewing their security measures, was supposed to have gone into affect Jan 1 but has been pushed back to May 1. Nevada’s law went into effect on October 1.

As far back as May 2007, Minnesota passed a law known as the Plastic Card Security Act. Under the statute, companies that suffer data breaches and are found to have been storing prohibited credit or debit card data on their systems will have to reimburse banks and credit unions for the costs of blocking and reissuing cards. Attempts at passing similar legislation-most of which are sponsored by financial institutions–have so far failed in places such as California, Texas and elsewhere. But all its going to take is for another major retail breach or two for them to be revived.

The security requirements spelled out in these statutes are mostly the same as those mandated under PCI though they cover other data classes as well such as Social Security numbers and bank account information. The key difference is that the mandates in Massachusetts and elsewhere are coming from a government agency and carry the full authority of state law. Companies that suffer data breaches and are found to have been noncompliant with the regulations could find themselves exposed to greater legal and financial issues than the PCI standard generally provides for.

Here again, everything will depend on how vigorously these mandates are enforced. But it probably is going to be a whole lot riskier for companies to simply pretend like they are doing something, as at least a few appear to be doing, with PCI.

Identity Theft Expert Speaker; Why Technology Won’t Prevent Identity Theft

www.IDTheftSecurity.com Why Technology Won’t Prevent Identity Theft http://online.wsj.com/article/SB123125633551557469.html?mod=googlenews_wsj

Identity Theft Expert Speaker; TJX Hacker Sentenced To 30 Years In Turkish Prison

Identity Theft Expert Speaker Robert Siciliano CEO www.IDTheftSecurity.com comments;

WOW WOW WOW!! Ever see the movie “Papillon” with Dustin Hoffman? “Yaz” is screwed. Justice is served. Criminal Hackers, Carders globally are scratching their collective heads. Coordination by authorities cooperating worldwide is truly getting impressive.

It still bothers the heck out of me that the creditors make it so easy for a criminal to use a stolen card number. Over time, up and coming technology’s, if adopted will begin to solve the problem.

TJX Hacker Sentenced To 30 Years In Turkish Prison

Member of wardriving gang gets hard time for allegedly selling hundreds of thousands of stolen credit cards and personal information
Jan 08, 2009 | 01:49 PM

By Kelly Jackson Higgins
DarkReading
A Turkish court has sent one of the TJX hackers to prison for 30 years for his role in a rash of war-driving WiFi hacks on retailers that resulted in the theft of more than 40 million credit and debit cards.

Maksym “Maksik” Yastremskiy, 25, from Ukraine, was allegedly responsible for tens of millions of dollars in data theft worldwide. He’s one of 11 men charged with stealing more than 40 million customer credit and debit card numbers from OfficeMax, Barnes & Noble, Sports Authority, Forever 21, DSW, BJ’s Wholesale Club, and TJX. Yastremskiy was arrested outside of a Turkish nightclub in 2007 during an undercover operation.

The gang, which spanned the U.S., Ukraine, China, and Estonia, reportedly “sniffed” out vulnerable WiFi networks of various stores and installed malware that lifted customers’ data and credit card numbers.

“Thirty years is, of course, a very severe prison sentence for anyone to receive, and one that should give some people reason to reflect,” blogged Graham Cluley, senior technology consultant for Sophos, who also warned cybercriminals that authorities are getting better at cooperating worldwide to catch them. “Stop now. The rewards for cybercrime can sometimes be large, but you are at risk of ruining the rest of your life — and causing years of misery for your family and friends.”