CIO
Alleged kingpin of data heists was a computer addict, lawyer says
Security analysts scoff, say Gonzalez more likely 'addicted to money'

Albert Gonzalez, the man described by federal authorities as the kingpin of a gang responsible for stealing more than 130 million payment cards, is a computer addict constantly looking for ways to challenge his abilities, according to his lawyer.

In a conversation with Computerworld on Wednesday, Rene Palamino, the Miami-based lawyer representing Gonzalez said his client has had an unhealthy obsession with computers since the age of 8.

However, he stopped short of saying it was this obsession that might have pushed Gonzalez to get involved with the alleged crimes.

"He was self-taught," Palamino said of Gonzalez. "He didn't go out in the sandbox or play baseball. The computer was his best friend."

Gonzalez was drawn to look for bigger and bigger tests of his abilities, Palomino said. "One challenge was not enough and he'd move on to another challenge," he said. "It wasn't healthy. It's a sickness. It's a problem that has not been addressed in our society."

Palomino said he hopes to shed some light on computer addiction and to warn parents about the issue.

"[Gonzalez] is not looking to harm anybody physically," he added. "He's not a hardened criminal."

Gonzalez was one of three individuals indicted Monday in federal district court in New Jersey on charges related to the massive data thefts at Heartland Payment Systems, Hannaford Bros. 7-Eleven Inc and two other unidentified retailers. The three are alleged to have stolen data on more than 130 million payment cards from these five companies.

Gonzalez had been indicted twice last year - in Massachusetts and in New York - in connection with the sensational data heists at TJX Companies Inc., Dave & Busters, BJ's Wholesale Club, OfficeMax, Boston Market, Barnes & Noble, Sports Authority, Forever 21 and DSW. He is being held without bail in a Brooklyn, N.Y., detention center.

It's unclear how much money Gonzalez made from his "operation get rich or die tryin," but it was apparently enough to support a lavish lifestyle.

Court documents related to his previous indictments described a $75,000 birthday party that was thrown by Gonzalez, and how he once complained about having to manually count more than $340,000 in cash illegally withdrawn from ATM machines.

At the time of his arrest last May, Gonzalez had $1.65 million in bank accounts, a Glock 27 pistol with several rounds of ammunition and numerous PCs, laptop computers and storage devices.

It also was unknown whether Palamino plans on using Gonzalez's computer addiction issue as a defense in court or to drive a plea bargain.

But the mere suggestion that it might evoked a stream of derision and criticism from security experts.

"That contention is pure garbage" said Ira Winkler, president of the Internet Security Advisors Group, and a Computerworld columnist.

"Even if you assume that there was remote validity to that argument, he was negligent in getting treatment," for the addicition, Winkler said.

He also brushed aside Palamino's comments that Gonzalez would never hurt anyone.

"I doubt [Bernard] Madoff would have ever harmed anyone physically, and frankly I would consider Madoff less of a hardened criminal than Gonzales," Winkler said, referring to the convicted mastermind of a Ponzi scheme that stole billions of dollars from clients.

Gonzalez's continued hacking activities despite his previous brushes with the law suggest more of an "addiction to money" than anything else, Winkler said. "Gonzales did not randomly hack things at any opportunity, but repeatedly targeted organizations where he could maximize his financial gain."

Scott Christie, a former federal prosecutor who now leads the information technology group at law firm McCarter & English LLP, was surprised by the claim that Gonzalez is suffering from a computer addiction.

"He's addicted to computers and that somehow forces him to commit crimes, too?" asked Christie, who prosecuted 28 members of the Shadowcrew hacking group in 2004.

Gonzalez was a leading member of the group but was not prosecuted since he had become a government informant the year before. "When you've got nothing for a defense, I guess you've got nothing to lose," Christie said.

Alan Paller, research director at the SANS Institute in Bethesda, Md. also dismissed the notion of computer addiction as an excuse. "So someone who was always interested in money became a bank robber and his addiction to money made him do it?" Paller said.

At the same time, though, Palamino raises a broader issue and one that needs to be addressed at a national level, Paller said.

"People who understand how computers work and learn enough about them to be able to hack have no way at all to advance their interests and skills except to be a hacker," Paller noted. Often, the only place where people with good hacking skills can go is to crime, he said.

"Gun nuts still can't go shoot people and car fanatics still can't use cars to rob banks," added John Pescatore, an analyst with Gartner Inc. in Stamford.

"I do have some faith in our legal system. I believe the 'Twinkie defense' ploy was thrown out in 1979 and hopefully the same thing happens here," he said.

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Enter the fully qualified URL, eg. http://www.example.com/
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Newsletters
Sign up for our CIO newsletters!
Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from CIO and leading technology partners.
RSS Feeds
Syndicate content Syndicate content Syndicate content Syndicate content Syndicate content Syndicate content

URL
www.kyoceramita.com.au

Call us on
Australia: 1800 339 003
New Zealand: 0508 596 2732

Email us
marketing@kyoceramita.com.au

Did you realise that the cost or running a laser printer over its lifetime is likely to exceed the original purchase price by several times? To compare your current printer's running costwith a Kyocera printer, select the TCO Calculator

Total Cost of Ownership (TCO)
Kyocera Saves... Try our Saving Estimator now
Calculate Now

Testimonials

 

Wondering how to improve your business with UC on an IP Network?

Join Computerworld's Live Webinar where we will address the move many companies are making towards IP based voice services (SIP trunking, VoIP) and look at how they are using a single connection for data and voice rather than separate lines. Learn about the latest in IP networks and how it can help your organisation.

Wednesday 25th November 2009, Time 10.30 am EST (Sydney, Australia) Screening at your desk

Register now

  • +

    CA brings SOA security to open source JBoss 09 February, 2010 10:08:00

    More commercial options for widely-used app server
    CA has announced its SiteMinder and SOA Security Manager products are now available for the open source JBoss middleware platform.
  • +

    Indian pleads guilty in overseas stock hacking scheme 08 February, 2010 07:50:00

    The group of hackers compromised brokerage accounts, then pumped up the prices of stocks
    An Indian national pleaded guilty Friday to conspiracy and aggravated identity-theft charges related to an international fraud scheme to hack into online brokerage accounts in the U.S. and use them to manipulate stock prices, the U.S. Department of Justice said.
  • +

    E-mail scam steals €3 million in carbon credits 05 February, 2010 06:47:00

    The phishing scheme resulted in losses of up to €3 million from companies
    A clever phishing scheme launched last week may have stolen more than €3 million (US$4.1 million) worth of carbon emission permits from companies.
  • +

    Windows 7 Tips: Best Security Features 04 February, 2010 04:52:00

    IT can specify which applications can run on employees' desktops
    For both enterprises and consumers, one of the big draws of Windows 7 has been its tighter security features.
  • +

    Twitter forces password reset to protect some accounts 04 February, 2010 05:48:00

    The company has discovered that log-in information has been stolen in compromised torrent file-sharing sites
    Twitter required some users to reset their passwords on Tuesday after discovering that their log-in information may have been harvested via security-compromised torrent Web sites, the company said.

Upcoming Industry Events
  • No upcoming events available
Whitepaper

Overtaken by Events? The Quest for Operational Responsiveness | A Survey of Global Energy, Telecoms, and Logistics Businesses

As this white paper will demonstrate, harnessing business events, smart interpretation and fast response are definite objectives, and the need is immediate. Read notes from 400 interviews performed by an independent research company - download now.

CIO Industry Insight Podcast #6: Brenton Smith, Managing Director, CA (ANZ)
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email
Whitepaper
Securing People and Information: How to Protect Against Today’s Web-based Threats

This white paper explores the benefits of an Application Delivery Network, highlighting the ability to protect your users and applications and still deliver outstanding application performance with confidence, consistency and cost-effectiveness across your distributed network.

Read Whitepaper

Brought to you by