MANCHESTER, N.H. – Two Romanian men this week pleaded guilty to hacking into point-of-sale terminals at hundreds of Subway stores in the U.S. from Romania to steal credit union and bank credit card data from more than 146,000 accounts, which they used to siphon more than $10 million between 2009 and 2011.
The two suspects, Iulian Dolan, 28, and Cezar Iulian Butu, 27, pleaded guilty to charges of conspiracy to commit computer fraud.
Dolan also pleaded guilty to two counts of conspiracy to commit credit card fraud and has agreed to spend seven years in prison. He admitted helping the alleged ringleader of the hacking group, Adrian-Tiberiu Oprea, to scan the target computers, crack the passwords and install keystroke loggers that would grab data from cards as they were swiped and PIN data keyed in, according to the plea agreement.
Members of the group used the stolen payment card data to make unauthorized charges and to transfer funds from those accounts.
Butu has agreed to a 21-month prison sentence. He and Dolan were among four Romanian nationals extradited to the U.S. in May.
Oprea is in custody awaiting trial in New Hampshire.