Three people have been charged with stealing credit and debit card numbers from customers at U.S. restaurant chain Dave & Buster's Inc by hacking into cash register terminals, the Department of Justice said on Monday.
Maksym Yastremskiy, of Kharkov, Ukraine and Aleksandr Suvorov, of Sillamae, Estonia, are accused of hacking into 11 Dave & Buster's cash register terminals to acquire credit card account numbers and card expiration dates. They sold the stolen data to others who used it to make fraudulent purchases, prosecutors said.
The two were charged in a 27-count indictment unsealed in Central Islip, New York, with charges including conspiracy, wire fraud and aggravated identity theft, according to the DOJ and the U.S. Attorney's Office for the Eastern District of New York.
The third defendant, Albert Gonzalez of Miami, is accused in a criminal complaint of wire fraud conspiracy related to the alleged scheme, prosecutors said.
The case is being investigated by the U.S. Secret Service, with cooperation and assistance from the Dallas-based restaurant chain.
Yastremskiy and Suvorov, in or about May 2007, installed at each restaurant a "packet sniffer," a piece of computer code designed to capture communications between two or more computer systems on a single network, according to the indictment.