Feeds

Bank of America insider admits he stole sensitive customer data

Account balances under $100,000 need not apply

Providing a secure and efficient Helpdesk

An employee in one of Bank of America's customer call centers has admitted he stole sensitive account information and tried to sell it for cash.

Brian Matty Hagen said he met with two individuals whom he later learned were undercover FBI agents and offered to sell them names, dates of birth, telephonic passwords, and other details for Bank of America customers, according to court records. He met with them at a restaurant in Sun City, Florida, where he told them he was looking for accomplices who knew how to milk the accounts by establishing phony credit cards in the customers' names or through other means.

At first, Hagen demanded at least half of the resulting take, but later was talked down to 25 percent. He demanded he be paid in cash and said he'd only deal with accounts that had balances exceeding $100,000.

Last week, he pleaded guilty to one count of bank fraud. He faces a maximum penalty of 30 years in federal prison and a $1m fine. Prosecutors agreed to recommend a much lower sentence in exchange for his cooperation.

Hagen was able to access the private data using his position as a call center attendant. When one customer identified by the initials E.H.S. called to find out if automatic payments to a Netflix account had been stopped, Hagen captured the customer's data and turned it over to the undercover fed. E.H.S. had a balance of almost $445,000. He told the agent he planned to keep working at Bank of America even after the money was stolen.

The incident is a reminder of the threats banks and other sensitive organizations face from insiders. Prosecutors said potential losses to Bank of America exceeded $1.3m. ®

Choosing a cloud hosting partner with confidence

More from The Register

next story
SMASH the Bash bug! Apple and Red Hat scramble for patch batches
'Applying multiple security updates is extremely difficult'
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
Hackers thrash Bash Shellshock bug: World races to cover hole
Update your gear now to avoid early attacks hitting the web
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
prev story

Whitepapers

A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.