A Romanian man has been sentenced to 21 months in prison for his part in a scam that saw the point-of-sale systems of hundreds of US Subway sandwich shops hacked, thousands of cards compromised and millions of dollars stolen.
Having pleaded guilty to one count of conspiracy to commit access device fraud in September, Cezar Butu was sentenced this week. His co-conspirator Iulian Dolan will be sentenced in April, having also pleaded guilty and agreeing a seven years term.
The pair were part of a four-man gang that between 2009 and 2011 remotely hacked the POS systems of more than 200 retail outlets, including 150 Subway stores, say authorities.
According to court documents, Butu and his co-conspirators used the stolen data to make unauthorised charges on and transfers of funds from, cardholders' accounts. He has admitted to repeatedly asking an alleged fellow gang member to provide him with stolen card data and receiving instructions for how to access a Web site where some of it was stored.
According to his plea agreement, he also attempted to sell, or otherwise transfer, the data to others. Butu admitted to acquiring information from around 140 cardholders.
A third alleged co-conspirator Adrian-Tiberiu Oprea is set to go on trial next month.