US files charges over plot to steal one billion email addresses

US authorities Friday unveiled charges against two Vietnamese nationals and one Canadian in connection with a computer fraud scheme to steal over one billion email addresses.

The data breach was the largest in US history and was the subject of a 2011 congressional inquiry.

Indictments in the case accuse two Vietnamese nationals of hacking into at least eight major email services from February 2009 to June 2012, stealing the email addresses that were then used for various spam and marketing schemes.

The scheme netted at least $2m from the marketing of various products and services, according to the US Justice Department.

Those charged with hacking were Viet Quoc Nguyen, 28, and Giang Hoang Vu, 25, both Vietnamese nationals.

The charges were unsealed following the arrest of David-Manuel Santos Da Silva, 33, of Montreal, Canada, who is accused of conspiracy to commit money laundering for helping Nguyen and Vu to generate revenue from the scheme and launder the proceeds.

Da Silva was arrested last month at Fort Lauderdale international airport and was to be arraigned Friday in Atlanta.

Vu was arrested in 2012 in the Netherlands and extradited to the United States in March 2014.

Last month, he pleaded guilty to conspiracy to commit computer fraud and is to be sentenced on 21 April, officials said. Nguyen remains a fugitive.

“This case reflects the cutting-edge problems posed by today’s cybercrime cases, where the hackers didn’t target just a single company; they infiltrated most of the country’s email distribution firms,” said acting US attorney John Horn in Atlanta.

“And the scope of the intrusion is unnerving, in that the hackers didn’t stop after stealing the companies’ proprietary data – they then hijacked the companies’ own distribution platforms to send out bulk emails and reaped the profits from email traffic directed to specific websites.”

According to investigators, Da Silva owned 21 Celsius Inc, a Canadian corporation that ran Marketbay.com, which he used to help generate revenue from the data thefts.

Nguyen received a commission on sales generated from Internet traffic that he directed to websites promoting specific products, officials said.