A Romanian man, Iulian Schiopu, was sentenced on Tuesday to 45 months in prison for his role in a massive phishing scheme involving several individuals.
The phishers stored collected information in shared email accounts, which contained extensive payment card data, as well as names, addresses, telephone numbers, dates of birth, and Social Security numbers, according to a Tuesday FBI release.
The information was used to access bank accounts and withdraw funds, notably from ATMs in Romania. Nearly 20 Romanian citizens have been charged in the investigation.
In 2005, the FBI was contacted about a fake People's Bank website being hosted on a compromised computer in Minnesota. Further investigation revealed that Citibank, Capital One, Bank of America and PayPal were also targets.
Schiopu was arrested in Sweden in May 2013 and was extradited to the U.S. in September 2013.
