Ukraine Uncovers $721K Cybercrime Scheme Targeting California Retailer

Ukrainian authorities have identified an 18-year-old suspect linked to a cybercrime operation that compromised nearly 30,000 customer accounts of a California-based online retailer. The operation, which ran from 2024 to 2025, involved the use of infostealer malware to harvest sensitive data, including login credentials and session tokens. Approximately 5,800 of the compromised accounts were exploited for unauthorized purchases totaling around $721,000, leading to direct losses exceeding $250,000. The investigation was initiated after U.S. law enforcement alerted Ukrainian officials about potential cyberattacks from Ukraine targeting American e-commerce platforms. Evidence collected during searches included mobile phones, computers, and cryptocurrency accounts, but no arrests have been reported yet. The suspect is believed to have managed the infrastructure for processing and selling stolen data through underground platforms.

Key Points: • An 18-year-old from Odesa is suspected of managing a cybercrime operation targeting a California retailer. • The scheme compromised nearly 30,000 accounts, leading to unauthorized purchases worth $721,000. • Infostealer malware was used to harvest sensitive data, highlighting the growing threat of credential theft.