Canadian charged with running LeakedSource.com, selling stolen data
(Reuters) — A Canadian man accused of operating the LeakedSource.com website, a major repository of stolen online credentials, appeared in a Toronto court on Monday charged with trafficking in billions of stolen personal identity records.
The site, which was set up in 2015 and shut down in early 2017, had collected around 3 billion personal identity records and associated passwords from a string of major breaches and made them accessible and searchable for a fee.
A similar site has since emerged whose servers Canadian police believe are located in Russia.
The man, 27-year-old Jordan Evan Bloom, is accused of administering the site and collecting CA$247,000 ($200,000) from the sale of stolen records and associated passwords, the Royal Canadian Mounted Police said.
The charges against Mr. Bloom include trafficking in identity information, mischief to data, and possession of property obtained by crime, the RCMP said.
Imran Ahmad, a cyber security lawyer at Miller Thomson in Toronto, said the charges come with maximum sentences of between five and 10 years in prison.
He said it was likely that Mr. Bloom was working with others in running the site, and that the money police say he collected was likely only a portion of the site's overall haul.
"Cyber criminals typically have an underground network of collaborators and given the size of the database and scope of the endeavor, I suspect others were likely involved," Mr. Ahmad said via email.
The RCMP said Bloom was the sole operator of the Canadian website and that their investigation is closed.
Mr. Bloom was charged on Dec. 22, the RCMP said, as part of its cyber crime team's investigation, dubbed Project Adoration. The RCMP said the assistance of Dutch national police and the United States' Federal Bureau of Investigation was "essential to the investigation."
Mr. Bloom is due back in court on Feb. 16, CBC News said.
Read Next
-
China, Canada vow not to conduct cyber attacks on private sector
(Reuters) — China and Canada have signed an agreement vowing not to conduct state-sponsored cyber attacks against each other aimed at stealing trade secrets or other confidential business information.
Related Stories
-
China, Canada vow not to conduct cyber attacks on private sector
-
Massachusetts sues Equifax as hack concerns spread to Canada
