Man held at JFK airport over largest US financial cyber-hacking

Joshua Samuel Aaron had been living in Moscow, US officials said

FBI and US secret service agents say they have arrested a man charged with the largest cyber-attack of financial firms in America's history. 

US national Joshua Samuel Aaron, 32, was held at New York's JFK airport and will appear in court on Thursday. He is one of three men accused of illegally accessing the personal information of 100 million people in 2012-15.

JP Morgan was among several financial institutions affected by extensive hacking of customer data

Twelve major institutions were victims of the hacking, including JPMorgan. Until now Mr Aaron had been a fugitive living in Moscow.


In a statement on Wednesday, US Attorney Preet Bharara said: "Joshua Samuel Aaron allegedly worked to hack into the networks of dozens of American companies, ultimately leading to the largest theft of personal information from US financial institutions ever."

The other two suspects are Israeli men: Gery Shalon and Ziv Orenstein. They were arrested in Israel in July 2015, and extradited to the US in June 2016.

All three men were charged in November 2015. They allegedly manipulated stock prices by selling shares of companies to individuals whose contact information they had stolen.

The men were also charged with running an illegal payment processing business that they used to collect $18m (£14.3m) in fees.

Prosecutors claim the men hacked into competitors' systems to spy on them and then hacked into a credit card company investigating their payment processing business in order to avoid detection.

The company hit hardest by the breach was JPMorgan. More than 83 million of the bank's customers had data stolen in the breach.