Dollar bills
A Russian gang may have stolen over $2m by making clones of debit cards

Thieves steal millions from Citibank customers

Gang hacked third-party ATM system to get Pins

Iain Thomson in San Francisco

Three people have been charged with stealing millions of dollars from Citibank customers after finding a way to steal Pins.

The team, who were arrested by the FBI in March, managed to hack into an ATM transaction processing firm and collect the Pins from cards used in 7/11 stores.

Advertisement

The ATM machines carried the Citibank brand but were built and maintained by the 7/11 chain.

"Citibank's systems were not compromised in this incident, which ended in March. This had to do with 7/11's network," Rob Julavits, a spokesman for the bank, told vnunet.com.

"Earlier this year Citibank received notice from a third-party transaction processor for the ATM industry that the processor's systems were potentially compromised in late 2007.

"By March we had notified and reissued cards to all customers whom we believed may have been exposed to increased risk."

This had to do with 7-11's network

Rob Julavits Citibank

The precise details of the attack have not been released, as the trial of Yuriy Rakushchynets, Ivan Biltse and Angelina Kitaeva has just begun in the US District Court for the Southern District of New York.

However, the fault may lie with the internet connections linking the ATMs to the payment processors or the servers that handle them.

The 7/11 network is run by two companies which operate the ATMs, Cardtronics and Fiserv Inc. Fiserv was unavailable for comment but is reportedly not involved with the case. Cardtronics has denied involvement.

"Cardtronics is not involved in this criminal prosecution and therefore does not anticipate that it will issue any statements with respect to this case or the alleged conduct of the defendants in this case," the firm said in a statement.

"All ATMs owned or operated by Cardtronics have encrypted Pin pads, as well as triple data encryption as required by the various electronic fund transfer networks."

Seven other people have been arrested in the case. It is believed that the gang may have stolen over $2m by making clones of cards and withdrawing money from legitimate cash machines.

On his arrest Biltse was reportedly found with $800,000 in cash at his home, so the final total may be much higher.

Early documents filed by the FBI suggest that the heist was managed by a leader in Russia, who supplied the information and took 70 per cent of the proceeds.

Twenty-five per cent went to the people withdrawing the cash, and five per cent covered expenses.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Banks failing on ATM security

Unencrypted messages open to abuse, claims report

Chip and Pin

Researchers warn of chip and Pin flaws

Popular retail machines vulnerable to attack

ATM celebrates 40th birthday

Radioactivity from first machines still around

ATM passwords found online

Up to 70,000 US cash machines vulnerable

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file...

Dell Adamo XPS

Dell launches ultra-thin Adamo XPS

World's thinnest laptop will be available by Christmas

Top 10 articles, 6 November 2009

The worst Microsoft products of all time, and a USB...

Iain Thomson

Pirate Bay shutdown could be inspiring online militancy

Recent Swedish attacks raise worrying possibility

Primary Navigation