Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

Man Accused of SQL Injection Hacking Gets 69-Month Prison Sentence 

Vitalii Antonenko has been sentenced to 69 months in prison for hacking, but he is being released as he has been detained since 2019.

The US Justice Department has announced the sentencing of 32-year-old Vitalii Antonenko, a man accused of hacking, credit card theft, and money laundering. 

Antonenko, a resident of New York City, was arrested in March 2019 after returning from Ukraine. An indictment accusing him of participating in a cybercrime scheme was announced one year later. 

The man pleaded guilty to conspiracy to engage in computer hacking, money laundering, and trafficking in stolen payment card information in September 2024.

Last week, Antonenko was sentenced to 69 months and 18 days in prison, but since he has been detained since 2019 he will be released 10 days after sentencing.

When he was arrested in 2019 after landing at JFK Airport following a trip to Ukraine, law enforcement discovered that computers and other storage devices he had been carrying contained hundreds of thousands of stolen payment card numbers.

Investigators determined that Antonenko was part of a cybercrime group that searched the internet for vulnerable networks from which they could steal personal and payment card information. 

Advertisement. Scroll to continue reading.

Targeted organizations included a hospitality business and a non-profit scientific research institution.

The hackers exploited SQL injection vulnerabilities to obtain the data, which they then sold on cybercrime marketplaces. The proceeds were laundered using cryptocurrency and traditional bank and cash transactions. 

Related: Man Who Stole and Laundered Roughly $1B in Bitcoin Is Sentenced to 5 Years in Prison

Related: Idaho Man Sentenced to 10 Years in Prison for Hacking, Data Theft, Extortion

Related: Pentagon Secrets Leaker Jack Teixeira Sentenced to 15 Years in Prison by a Federal Judge

Related: Four REvil Ransomware Group Members Sentenced to Prison in Russia

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

SolarWinds has appointed Justin Henkel as Chief Information Security Officer.

J. Paul Haynes has joined Cinchy as Chief Executive Officer.

Hatem Naguib has become Chief Executive Officer at Sysdig.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.