Preet Bharara, the United States Attorney for the Southern District of New York, and George Venizelos, the Assistant Director-in-Charge of the New York Office of the Federal Bureau of Investigation (“FBI”), announced today the unsealing of an indictment charging LAURI LOVE, a citizen of the United Kingdom, with computer hacking and aggravated identity theft. The charges stem from LOVE’s efforts in late 2012 and early 2013 to secretly infiltrate computer servers belonging to the Federal Reserve Bank (the “Federal Reserve”), remove non public information from those servers, and publicly disclose that information by posting it on certain websites.
Manhattan U.S. Attorney Preet Bharara said: “As alleged, Lauri Love is a sophisticated hacker who broke into Federal Reserve computers, stole sensitive personal information, and made it widely available, leaving people vulnerable to malicious use of that information. We place a high priority on the investigation and prosecution of hackers who intrude into our infrastructure and threaten the personal security of our citizens.”
Assistant Director-in-Charge George Venizelos said: “As alleged in the indictment, Lovewas part of a sophisticated network of criminals involved in computer intrusions. Fortunately,Love underestimated the level of sophistication and dedication maintained by the FBI Cyber
Division to vigorously investigate and identify Love’s criminal hacking and identity theft. Cybercrime knows no boundaries and justice will not stop at international borders. The FBI is committed to working with private and public entities to stop computer intrusions and prevent hackers from harming victim companies and individuals. We thank the Federal Reserve Bank of New York for its assistance in this investigation.”
According to the allegations in the Indictment unsealed today in Manhattan federal court:
LOVE is a sophisticated computer hacker who resides in the United Kingdom. From
October 2012 through February 2013, LOVE worked with other computer hackers around the world to secretly gain access to the Federal Reserve’s computer servers in order to steal and then publicly disseminate confidential information found on those servers, including personal identification information of people using the Federal Reserve network.
LOVE and the other computer hackers communicated with each other by logging onto arestricted online “chat room” (the “Chat Room”) and sending messages to each other. Asreflected in the Chat Room messages, in the months prior to the hack of the Federal Reserveservers, LOVE and the other hackers in the Chat Room were searching the Internet for computerservers that were running a particular software program (the “Program”). LOVE and the otherhackers were aware that the Program contained a vulnerability that they could use to gainunauthorized access to those servers.
In October 2012, LOVE determined that certain of the servers that were running the
Program belonged to the Federal Reserve. Thereafter, LOVE used a particular hacking methodcalled a sequel injection to exploit the vulnerability in the Program and gain unauthorized accessto certain Federal Reserve servers, including servers associated with the Federal Reserve Bank of
New York. LOVE used his unauthorized access to locate and steal certain confidentialinformation residing on the Federal Reserve servers, including the names, e-mail addresses, andphone numbers of users of the Federal Reserve computer system. LOVE then disseminated thatinformation publicly by posting the information to a website that previously had been hacked andthat he controlled.
* * *
LOVE, of Suffolk, England, has been charged with one count of computer hacking,which carries a maximum term of 10 years in prison, and one count of aggravated identity theft,which carries an additional sentence of two years in prison. The maximum potential sentences inthis case are prescribed by Congress and are provided here for informational purposes only, as
any sentencing of the defendant will be determined by the judge.Mr. Bharara praised the outstanding investigative efforts of the FBI. He also thanked theFederal Reserve Bank of New York for its assistance in this investigation.
The case is being handled by the Office’s Complex Frauds Unit.
The charges in the Indictment are merely accusations, and the defendant is presumedinnocent unless and until proven guilty.