Threat Management

Man charged with using SQL injection to access Federal Reserve data

Months after being indicted by the New Jersey U.S. Attorney's Office for his alleged role in the hacking of U.S. Army and other government-run databases, 28-year-old U.K. citizen Lauri Love has been charged in the Southern District of New York.

From October 2012 to February 2013, Love allegedly worked with other hackers to steal and publicly distribute personal information housed on the Federal Reserve network, according to the indictment (PDF), which states that Love communicated with his cohorts in a restricted online chat room.

Love is charged with one count of computer hacking and one count of aggravated identity theft, which together carries a maximum sentence of 12 years. 

According to the indictment, Love used SQL injection to take advantage of a vulnerability in software used by certain servers belonging to the Federal Reserve, which allowed him to gain unauthorized access.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.