SEATTLE — In an investigation that spanned from a Seattle restaurant to Romania, a 21-year-old Dutch national pleaded not guilty on Monday to federal computer hacking charges that include the theft of at least 44,000 credit card numbers, including some from the Boeing Employees Credit Union.
Federal prosecutors said David Benjamin Schrooten is a prominent figure known as “Fortezza” in the international hacking community. They said he sold stolen credit card numbers in bulk.
The 44,000 credit card numbers included in these charges come from just one transaction, authorities said.
Schrooten was arrested in Romania and arrived in Seattle on Saturday. He has been charged with 14 crimes, ranging from access device fraud to identity theft, authorities said.
“People think that cyber criminals cannot be found or apprehended. Today we know that’s not true. You cannot hide in cyberspace,” said U.S. Attorney Jenny A. Durkan at a press conference. “We will find you. We will charge you. We will extradite you and we will prosecute you.”
A message left with Schrooten’s listed attorney was not immediately returned.
Seattle and federal authorities credited a local Italian restaurant owner for sparking the investigation.
Corino Bonjrada said he became alarmed after several complaints from customers of suspicious charges after dining at Modello Risorante Italiano.
Customers suspected his workers had taken their credit card information and used it, but Bonjrada found no evidence of that. He then called computer experts and eventually the police, he said.
That led police to 21-year-old Christopher A. Schroebel of Maryland, who they say planted spying malware in the sales systems of two Seattle businesses, two of dozens of businesses targeted. Schroebel had collected at least 4,800 credit card numbers in 2011.
“Some of my customers were saying they didn’t know if they wanted to come back,” Bonjrada said. “They were afraid.”
Schroebel was arrested in November 2011 and pleaded guilty last month. Investigators said Schrooten worked with Schroebel in creating websites to sell the credit card numbers.
Bonjrada said some customers were charged within “ten minutes” of using their credit card at his restaurants in the amounts of $70 or $80.
Authorities said the investigation into the ring run by Schrooten is continuing.