U.S. prosecutors on Tuesday announced expanded charges against two men that link them to a 2014 cyberattack against JPMorgan Chase that affected tens of millions of customers, as well as hacks against other companies and financial news organizations. The case is one of the most significant crackdowns on cybercrime in the financial sector.
Israeli citizen Gery Shalon and U.S. citizen Joshua Aaron, are now facing computer hacking charges. Another alleged co-conspirator, Israeli citizen Ziv Orenstein, was listed on a newly unsealed 23-count indictment that also includes charges of security fraud and identity theft but was not specifically tied to computer hacking charges. The victims of the alleged cybercrime spree included financial services companies in New York, Boston, St. Louis, Omaha and elsewhere, as well as financial news publishers and software developers, according to the indictment.
Shalon was the leader of a "sprawling cybercriminal enterprise" that operated "through hundreds of employees, co-conspirators and infrastructure in over a dozen countries," the indictment alleges. It said that Shalon orchestrated "massive hacking crimes" against U.S. financial institutions from 2012 through mid-2015, "including the largest theft of customer data from a U.S. financial institution in history."