Ukraine Investigates 18-Year-Old Suspect in E-Commerce Account Theft Scheme
Summary
Ukrainian authorities allege an 18-year-old from Odesa was linked to a scheme that used info-stealing malware to obtain customer credentials and session data, compromising nearly 30,000 accounts at a California retailer and enabling unauthorized purchases.
Key points
- Ukrainian authorities say the alleged operation compromised nearly 30,000 customer accounts at an unnamed California online retailer between 2024 and 2025.
- Investigators say at least 5,800 accounts were used for unauthorized purchases worth about $721,000; losses exceeded $250,000, including chargeback-related costs.
- Authorities allege the group used info-stealing malware to harvest login credentials and session data, which were later sold through online platforms and Telegram channels.
- An 18-year-old Odesa resident is suspected of managing infrastructure used to process, sell, and exploit the stolen information.
- Authorities say searches linked to the suspect yielded devices, storage media, alleged credentials for stolen-data sales platforms, server logs, and cryptocurrency account information.
- Officials did not name the alleged hacker group or identify the malware tools; the claims are attributed to investigators and are not independently confirmed in the article.
Article Details
- Victim Organization
- Unnamed U.S.-based online retailer in California
- Incident Type
- Alleged customer-account compromise, credential and session-data theft, and unauthorized purchases
- Data Types Exposed
- Login credentials
- Session data
- Affected Records
- Nearly 30,000 customer accounts were allegedly compromised; at least 5,800 were reportedly used for unauthorized purchases.
- Affected Data Size
- Unknown
- Operational Impact
- Unauthorized purchases were reportedly worth roughly $721,000, causing more than $250,000 in losses, including chargeback-related costs.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged
Countries
Ukraineauthorities informed their Ukrainian counterparts that hackers operating from Ukraine could be involved in attacks targeting users of American e-commerce platforms, Ukraine’s Prosecutor General said in a statement onUnited Statesis linked to an international cybercrime operation that compromised nearly 30,000 customer accounts at a U.S.-based online retailer and facilitated unauthorized purchases worth about $721,000.