US busts hacking-insider trading ring

  • 12/08/2015
US Attorney for New Jersey Paul J Fishman (C) looks at Secretary of Homeland Security Jeh Johnson while he speaks during a news conference in Newark, New Jersey (Reuters)
US Attorney for New Jersey Paul J Fishman (C) looks at Secretary of Homeland Security Jeh Johnson while he speaks during a news conference in Newark, New Jersey (Reuters)

An international team of computer hackers and stock traders has been charged with pocketing more than US$100 million in illicit profits based on stolen market-moving media releases.

The Department of Justice charged nine people in a criminal conspiracy with making more than $30 million in illegal trades on the pilfered information.

A parallel civil case from the US Securities and Exchange Commission listing 32 defendants said the scheme yielded over US$100 million in unlawful profits.

The conspiracy was engineered by a pair of hackers in Ukraine who successfully penetrated the computer systems of Marketwired, PR Newswire and Business Wire, which distribute press releases for major publicly traded companies, the officials said.

"The defendants were a well-organised group that allegedly robbed the newswire companies and their clients and cheated the securities markets and the investing public by engaging in an unprecedented hacking and trading scheme," said US attorney Paul Fishman.

"The defendants launched a series of sophisticated and relentless cyber attacks against three major newswire companies, stole highly confidential information and used [it] to enrich themselves at the expense of public companies and their shareholders."

The Ukraine-based hackers stole some 150,000 press releases from February 2010 through this year that contained non-public information critical to stock valuation, the DOJ said.

The hackers then sold the stolen data to traders, at times being compensated with a flat fee and other times with a percentage of profits from trades, the SEC said.

Besides the two hackers, DOJ indictments cite seven defendants from Ukraine and the US states of Georgia, Pennsylvania and New York.

Five of the defendants have been arrested, said a spokesman for the US attorney in New Jersey. The other four defendants remain in Ukraine, and international arrest warrants were issued for their arrests, the Justice Department said.

Hackers stole newswires' employee login identities and introduced malware in the systems. They also created an instructional video for their cohorts on how to access the stolen information, the DOJ indictment said.

The financial newswires said they had co-operated with US authorities.

"Despite extreme vigilance and commitment, recent events illustrate that no one is immune to the highly sophisticated illegal cyber-intrusions that are plaguing every aspect of our society," said Business Wire chief executive Cathy Baron Tamraz.

Marketwired said it had "found and fixed the issue at the heart of this matter and we are confident that Marketwired is protected by world-class security, monitoring and prevention practices".

"At PR Newswire, we take security very seriously and are dedicated to protecting our information and systems," said chief executive Robert Gray.