These FIN7 hackers and their co-conspirators were responsible for breaching the networks of businesses across the United States since at least 2015. They launched a series of highly-sophisticated malware attacks on U.S. businesses primarily those in the gambling, hospitality, and restaurant industries. Some of the businesses attacked by the hacking group include Chipotle Mexican Grill, Chili’s, Arby’s, Red Robin, and Jason’s Deli.
The hacking group stole more than 20 million debit and credit card numbers, causing more than $1 billion in damages to U.S. victims.
In a statement, DOJ Criminal Division Assistant Attorney General Kenneth Polite, Jr. said, “Iarmak and his conspirators compromised millions of financial accounts, causing over a billion dollars in losses to Americans and costs to America’s economy.”
On the other hand, U.S. Attorney Nicholas W. Brown of the Western District of Washington commented, “Iarmak was directly involved in designing phishing emails embedded with malware, intruding on victim networks, and extracting data such as payment card information. To make matters worse, he continued his work with the FIN7 criminal enterprise even after the arrests and prosecution of co-conspirators. He and others in this cybercrime group used hacking techniques to essentially rob thousands of locations of multiple restaurant chains at once, from the comfort and safety of their keyboards in distant countries.”
