Third Member Of International Computer Hacking Ring Pleads Guilty To Hacking And Intellectual Property Theft Conspiracy
WILMINGTON, Del. – A third member of an international computer hacking ring has pled guilty to conspiring to break into computer networks of prominent technology companies and to steal more than $100 million in intellectual property and other proprietary data.
Nathan Leroux, 20, of Bowie, Maryland, pled guilty to conspiracy to commit computer intrusions and criminal copyright infringement based on his role in the cyber theft of software and data related to the Xbox One gaming console and Xbox Live online gaming system, and popular games such as the “FIFA” online soccer series; “Call of Duty: Modern Warfare 3;” and “Gears of War 3.” Leroux has been in custody since attempting to flee into Canada from Buffalo, New York, on June 16, 2014.
U.S. Attorney Charles M. Oberly III of the District of Delaware, Assistant Attorney General Leslie R. Caldwell of the Justice Department’s Criminal Division, and Special Agent in Charge Stephen E. Vogt of the FBI’s Baltimore Field Office made the announcement.
“As the indictment charges, the members of this international hacking ring stole trade secret data used in high-tech American products, ranging from software that trains U.S. soldiers to fly Apache helicopters to Xbox games that entertain millions around the world,” said Assistant Attorney General Caldwell. “The American economy is driven by innovation. But American innovation is only valuable when it can be protected. Today’s guilty pleas show that we will protect America’s intellectual property from hackers, whether they hack from here or from abroad.”
“With this plea, we see not just rampant hacking and data theft, but the subsequent exploitation of stolen intellectual property to generate illicit funds online,” said U.S. Attorney Oberly.
“This group hacked into the computer systems of multiple companies, took their property and tried to make money capitalizing on someone else’s hard work and effort. When you put it in very simple terms, it’s theft and against the law. There are consequences to breaking the law in the U.S., whether you live here or in another country,” said Stephen Vogt, FBI Special Agent in Charge of the Baltimore Field Office.
Conspirators Sanadodeh Nesheiwat, 28, of Washington, New Jersey, and David Pokora, 22, of Mississauga, Ontario, Canada, previously pled guilty to the same conspiracy charge on September 30, 2014. They remain in custody pending their sentencing hearings, which are scheduled for April 2015. Pokora’s plea is believed to be the first conviction of a foreign-based individual for hacking into U.S. businesses to steal trade secret information. Charges against a fourth defendant, Austin Alcala, 19, of McCordsville, Indiana, remain pending.
According to the superseding indictment and other court records filed in support of today’s guilty plea, Leroux was part of the hacking conspiracy between January 2011 and September 2012. During that period, hacking group members located in the United States and abroad gained unauthorized access to computer networks of various companies, including Microsoft Corporation, Epic Games Inc., Valve Corporation, and Zombie Studios. The conspirators accessed and stole unreleased software, software source code, trade secrets, copyrighted and pre-release works, and other confidential and proprietary information. Members of the conspiracy also allegedly stole financial and other sensitive information relating to the companies – but not their customers – and certain employees of such companies.
Specifically, the data theft targeted software development networks containing source code, technical specifications and related information for Microsoft’s then-unreleased Xbox One gaming console, as well as intellectual property and proprietary data related to Xbox Live and games developed for that online gaming system.
Leroux admitted in court that he and others used the stolen intellectual property to build, and attempt to sell, counterfeit versions of the Xbox One console before its public release in November 2013. In July 2013, the FBI intercepted a counterfeit console built by Leroux, which was destined for the Republic of Seychelles.
Leroux also admitted that he developed a software exploit that allowed him and others to generate millions of “coins” for the FIFA soccer games playable on the Xbox Live platform. These coins are the virtual, in-game currency used to build a “FIFA Ultimate Team” in the games. Without the authorization of Electronic Arts, the intellectual property rights holder to the FIFA games, Leroux and others sold bulk quantities of the “FIFA coins” via online black markets.
The value of the intellectual property and other data that the defendants stole, as well as the costs associated with the victims’ responses to the conduct, is estimated to range between $100 million and $200 million. To date, the United States has seized over $620,000 in cash and other proceeds related to the charged conduct.
This case is being investigated by the FBI, with assistance from the Criminal Division’s Office of International Affairs, the U.S. Department of Homeland Security’s Homeland Security Investigations and Customs and Border Patrol, the U.S. Postal Inspection Service, the Canada Border Services Agency, the Western Australia Police and the Peel Regional Police of Ontario, Canada.
The case is being prosecuted by Trial Attorney James Silver of the Criminal Division’s Computer Crime and Intellectual Property Section and Assistant U.S. Attorney Edward J. McAndrew of the District of Delaware.