↓ Skip to main content

“When ChronoPay’s internal emails were leaked in 2010, the username and password for its MegaPlan subscription were still working and valid.”

Brian Krebskrebsonsecurity.com ↗

Rescator sold more than 40 million Target cards and then 56 million from Home Depot. Ten years on, the trail runs through an email address in a ChronoPay staff directory to Mikhail Shefel, a ChronoPay vice president. ChronoPay employees picked Reservoir Dogs nicknames and forwarded everything to their real work inboxes. The clue sat in a screenshot in Krebs’s own notes the whole time.