09 October 2015

Hacker jailed over Subway store POS attack

09 January 2013  |  6045 views  |  1 Spiders computer virus

A Romanian man has been sentenced to 21 months in prison for his part in a scam that saw the point-of-sale systems of hundreds of US Subway sandwich shops hacked, thousands of cards compromised and millions of dollars stolen.

Having pleaded guilty to one count of conspiracy to commit access device fraud in September, Cezar Butu was sentenced this week. His co-conspirator Iulian Dolan will be sentenced in April, having also pleaded guilty and agreeing a seven years term.

The pair were part of a four-man gang that between 2009 and 2011 remotely hacked the POS systems of more than 200 retail outlets, including 150 Subway stores, say authorities.

According to court documents, Butu and his co-conspirators used the stolen data to make unauthorised charges on and transfers of funds from, cardholders' accounts. He has admitted to repeatedly asking an alleged fellow gang member to provide him with stolen card data and receiving instructions for how to access a Web site where some of it was stored.

According to his plea agreement, he also attempted to sell, or otherwise transfer, the data to others. Butu admitted to acquiring information from around 140 cardholders.

A third alleged co-conspirator Adrian-Tiberiu Oprea is set to go on trial next month.

Comments: (1)

Paul Vieros - Placard Pty Ltd - Melbourne | 10 January, 2013, 04:44

What is the deterrent if after 21 months this fraudster comes out to a few million?    And what about the compromised card holders who potentially have their Identities compromised...with all the baggage this entails!  Lastly what about the reputational impact on the merchant?

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)
Log in to receive notifications when someone posts a comment

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board, sign up now.

Related blogs

Create a blog about this story (membership required)

Related stories

29 November, 2012
19 September, 2012
17 August, 2012
Your browser is unable to support Flash files.

Top topics

Most viewed Most shared
European Parliament rubberstamps Payment S...
6251 views comments | 33 tweets | 35 linkedin
Faster Payments eases access for challenge...
4883 views comments | 20 tweets | 25 linkedin
Retail security bashing lobby group ABA ad...
4513 views comments | 17 tweets | 8 linkedin
Chinese hackers breach LoopPay
4339 views comments | 8 tweets | 6 linkedin
From biometrics to one-time passcodes, Mas...
4275 views comments | 12 tweets | 18 linkedin

Featured job

£100,000 basic, £180,000 OTE + Benefits

Find your next job