Heraldnet.com
TUESDAY, DECEMBER 2, 2008 10:22 pm
LocalNorthwestNation & WorldPoliticsSpecial ReportsPhotosColumnistsMultimedia 
Blog
Michelle Dunlop
Airline merger news and 'non-passenger' fees
Your town news
Steve Tytler
Steve Tytler answers your questions about real estate.
•Latest: Welcome mat out for zero-down VA loans
 
WEEK IN REVIEW
Monday


Crops attract snow geese; hunts control field-d...
County budget cuts hit courts, will affect cities
Man sold Lowe's gift cards from stolen goods, p...
Sunday


Fighting foreclosure: How one couple got caught...
Monroe man's family remembers a life devoted to...
155-year boys club comes to an end
Saturday
How to avoid holiday thieves
Burn ban orders will have new teeth
Get a flu shot now, officials urge
Friday


A community in limbo
Ideas arise on housing sex offenders
Turnout for historic election breaks county and...
Thursday


Ways to Give: Where you can make a difference
Ways to give: Charities hit hard from both sides
County Council cuts deeply from most staff exce...
Wednesday


Cancer survivor is again living the life of a t...
Tulalip school is grieving once more
Faulty part bogs down Boeing's jet lines
Tuesday


'We are devastated' by loss of two boys, family...
A scramble to shave $1.8 million from county bu...
Arlington about to add land; buildup could follow
 

ADVERTISEMENT

Business   Print This Article  Email This Page  Subscribe Now! facebook digg reddit del.icio.us fark stumble

 
ADVERTISEMENT

 
CONTACT THE HERALD
Mike Benbow, Business Editor
benbow@heraldnet.com
 
Published: Saturday, August 2, 2008

Arrests in sale of personal data from 2 million mortgage applications

The FBI on Friday arrested a former Countrywide Financial Corp. employee and another man in an alleged scheme to steal and sell sensitive personal information, including Social Security numbers, of as many as 2 million mortgage applicants.

The breach in security, which occurred over a two-year period though July, was one of the largest in years, experts said.

The insider was identified as Rene L. Rebollo Jr., 36, who had worked as a senior financial analyst at Full Spectrum Lending, Countrywide's subprime lending division. He was arrested at his home in Pasadena, Calif., and charged with unauthorized access to a financial institution's computers.

Authorities also arrested Wahid Siddiqi, 25, at his home in Thousand Oaks, Calif. Authorities alleged that he was a reseller of Countrywide data.

"Some, perhaps most, and possibly all the names were being sold to people in the mortgage industry to make new pitches," said U.S. Attorney's spokesman Thom Mrozek.

Rebollo's attorney, Michael V. Severo of Los Angeles, could not be reached for comment. Rebollo appeared in court Friday afternoon and was released on $80,000 bond.

Siddiqi was being held on a fraud charge pending a court appearance Monday, and prosecutors did not know if he has a lawyer yet.

In an affidavit filed in federal court, the FBI said Rebollo had voluntarily described the scheme. Rebollo said he would charge $400 or $500 for batches of thousands of "leads" -- personal and account information that presumably would help outside loan agents solicit new mortgages from the Countrywide applicants, some of whom had been denied loans at the Calabasas, Calif.-based company.

Authorities said they didn't know if any of the information has been used for outright fraud, such as identity theft.

Rebollo would copy information on about 20,000 customers at a time on Sunday nights by using a Full Spectrum computer that did not have the same security features as other machines in the office, according to the affidavit by FBI Special Agent Richard P. Ryan.

At that rate, the U.S. Attorney's office said, Rebollo would have compromised up to 2 million files for about 2.5 cents per customer profile -- an astonishingly small amount considering the importance of the material. Mortgage leads are among the most expensive for sale because of the potential payoffs to middlemen when loans are made.

In April, online mortgage broker LendingTree Inc. filed a suit claiming that two former employees gave prospective brokers unauthorized access to information on potentially millions of clients. The FBI is investigating that case as well, but authorities said the two are unrelated.

Social Security numbers alone generally fetch dollars, not pennies, each since they can be used to open new bank accounts.

"It's the potential for new-account fraud that arises when Social Security accounts are compromised," said Beth Givens, director of the nonprofit Privacy Rights Clearinghouse. "That's the most serious kind of financial identity theft" because large amounts can be involved and the fraud is more difficult to detect than it is on pre-existing accounts.

"This guy obviously didn't do his homework. He doesn't know the value of these on the black market," she said.

Givens said the breach was among the 10 largest involving sensitive information in the past 18 months.

A January 2007 breach at retailer TJ Maxx exposed 45 million credit card numbers. Certegy Check Services Inc. lost information on 8 million accounts to an insider in July last year. And in March, the Hannaford Bros. supermarket chain reported a theft of data on more than 4 million accounts.

Countrywide detected the security breach and alerted federal authorities, according to Suzy Martin, a spokeswoman for the company, which was acquired by Bank of America on July 1.

On July 15, Rebollo voluntarily turned over to the FBI a flash drive he used to download the Full Spectrum information and also gave investigators a personal computer, according to Ryan. The agent said in his affidavit that he pulled up about 40 spreadsheets at random from the flash drive.

"I observed large quantities of names associated with several columns of numeric data," Ryan wrote. "These columns contained telephone numbers, addresses and Social Security account numbers. Each spreadsheet contained several thousand lines of data."

Rebollo's attorney later called to say Rebollo had revoked permission for the FBI to search the drive and computer, and the searches stopped "pending further discussions regarding Rebollo's potential cooperation in the investigation," Ryan said.

A criminal complaint against Rebollo said he earned about $65,000 a year at Countrywide and had opened a personal bank account for holding what he estimated to be up to $70,000 in proceeds from Countrywide data sales.

The complaint said Siddiqi sold computer discs containing data on Countrywide customers to a witness working for the FBI, taking in $4,000 for about 38,000 customer profiles.

During the housing boom, Countrywide was the nation's largest mortgage lender and competed in all segments of the home-loan business, including subprime loans for high-risk borrowers. Subprime lenders aggressively courted these borrowers, seeking to refinance them into new home mortgages with low initial "teaser" interest rates when they ran up credit card and other debt.

1. SPEEA to vote today on Boeing contract
2. Man sold Lowe's gift cards from stolen goods, police allege
3. County budget cuts hit courts, will affect cities
4. Crops attract snow geese; hunts control field-damaging flocks
5. Barry Manilow to play Everett
6. Camano Island pair arrested with list of stolen credit card numbers
7. Gambling's growth prompts casino dealer school in Everett
8. Sultan financial errors detailed
9. Reardon can take days without pay
10. Silvertips take one (or two, or three, or more ...) for the team
Enterprise Newspaper Snohomish County Business Journal
Restaurant is a 'dream come true' for owner
Council unanimously adopts 2009 budget
Colleges brace for massive cuts
Was burglary suspect burglarized?
Food banks facing hard times
Council member resigns, heading to D.C.
Edmonds closes aid car loophole
Wildcats head to state semifinals
Thanksgiving served with an outpouring of generosity
The Enterprise Online Newspaper

TODAY'S TOP JOBS
 View All Top Jobs 
Top Cars
Top Homes


ADVERTISEMENT