← Back to cases

Manhattan U.S. Attorney Announces Extradition Of Defendants Linked To Massive Network Intrusions At U.S. Financial Institutions, U.S. Brokerage Firms, A Major News Publication, And Other Companies In Furtherance Of Securities Fraud Scheme And Other Crimes

2016-06-09 · Press release

Mentions 1960 Verified 1960

Preet Bharara, the United States Attorney for the Southern District of New York, Diego Rodriguez, Assistant Director-in-Charge of the New York Field Office of the Federal Bureau of Investigation (“FBI”), and David E. Beach, Special Agent in Charge of the U.S. Secret Service New York Field Office (“USSS”), announced today that GERY SHALON, a/k/a “Garri Shalelashvili,” a/k/a “Gabriel,” a/k/a “Gabi,” a/k/a “Phillipe Mousset,” a/k/a “Christopher Engeham,” and ZIV ORENSTEIN, a/k/a “Aviv Stein,” a/k/a “John Avery,” were extradited from Israel.  SHALON and ORENSTEIN were arrested in July 2015 for charges arising out of SHALON’s orchestration of massive computer hacking crimes against U.S. financial institutions, brokerage firms, and financial news publishers, including the largest theft of customer data from a U.S. financial institution in history.  SHALON is charged with committing these crimes with JOSHUA SAMUEL AARON, a/k/a “Mike Shields,” in furtherance of securities market manipulation schemes that SHALON and AARON perpetrated with defendant ORENSTEIN.  SHALON, a Georgian and Israeli citizen, and ORENSTEIN, an Israeli citizen, arrived in the Southern District of New York last night and early this morning, respectively, and will be presented today in Manhattan federal court, before U.S. Magistrate Judge Kevin Nathaniel Fox. 

Manhattan U.S. Attorney Preet Bharara said:  “Gery Shalon and Ziv Orenstein, two of the alleged perpetrators of the cybercrime that we described at the time of their arrests as securities fraud on cyber steroids, have been successfully extradited from Israel to the United States.  For the alleged hacks into numerous U.S. companies, including the largest theft of customer data from a U.S. financial institution in history, in furtherance of their securities fraud, Sharon and Orenstein will now face prosecution in a U.S. court.”

SHALON and ORENSTEIN were arrested by Israeli authorities in July 2015, pursuant to a provisional arrest warrant that was issued on the securities fraud charges in this case.    AARON, a U.S. citizen, has yet to be arrested by U.S. authorities.

*                *                *

The charges in the Indictment against SHALON, 31, of Savyon, Israel, AARON, 31, a U.S. citizen who is believed to reside in Moscow, Russia, and ORENSTEIN, 40, of Bat Hefer, Israel, are included in the chart below.  The maximum potential sentences listed below are prescribed by Congress and are provided here for informational purposes only, as any sentencing of the defendants will be determined by the judge.

Mr. Bharara praised the investigative work of the FBI and the United States Secret Service, and expressed his sincere gratitude to the Office of the State Attorney of the Israel Ministry of Justice’s Department of International Affairs and the Israel National Police, including its Cyber Unit - Lahav 433, for their support and assistance with the investigation and the extradition proceedings.  He also thanked the Securities and Exchange Commission, Immigration and Customs Enforcement - Homeland Security Investigations, the Financial Industry Regulatory Authority, the National Credit Union Administration, the Office of International Affairs of the U.S. Department of Justice, the Financial Services Information Sharing and Analysis Center, which significantly aided the investigation by facilitating information-sharing among the victim institutions, and the U.S. Marshals Service, for their assistance in the extradition of the defendants.

The prosecution of this case is being overseen by the Office’s Complex Frauds and Cybercrime Unit.  Assistant U.S. Attorneys Eun Young Choi and Sarah Lai are in charge of the prosecution.  Assistant U.S. Attorney Edward Diskant of the Office’s Money Laundering and Asset Forfeiture Unit is in charge of the forfeiture aspects of the case.

The charges contained in the Indictment are merely accusations, and the defendants are presumed innocent unless and until proven guilty.

Count

Defendants

Charge

Maximum Prison Term

One

SHALON and AARON

Conspiracy to commit computer hacking

Five years

Two

SHALON and AARON

Computer hacking

Five years

Three

SHALON and AARON

Computer hacking

Five years

Four

SHALON, AARON, and ORENSTEIN

Conspiracy to commit securities fraud

Five years

Five

SHALON, AARON, and ORENSTEIN

Conspiracy to commit wire fraud: Securities Market Manipulation Scheme

 

20 years

Six

SHALON, AARON, and ORENSTEIN

Securities fraud

20 years

Seven

SHALON, AARON, and ORENSTEIN

Eight

SHALON, AARON, and ORENSTEIN

Nine

SHALON, AARON, and ORENSTEIN

10

SHALON, AARON, and ORENSTEIN

11

SHALON, AARON, and ORENSTEIN

12

SHALON, AARON, and ORENSTEIN

 

 

13

SHALON, AARON, and ORENSTEIN

Wire fraud

20 years

14

SHALON, AARON, and ORENSTEIN

Conspiracy to commit identification document fraud

15 years

15

SHALON, AARON, and ORENSTEIN

Aggravated identity theft

Mandatory two years

16

SHALON and  ORENSTEIN

Unlawful internet gambling enforcement act conspiracy

Five years

17

SHALON and  ORENSTEIN

Unlawful internet gambling enforcement act

Five years

18

SHALON and  ORENSTEIN

Operation of illegal gambling business

Five years

19

SHALON and  ORENSTEIN

Conspiracy to commit wire fraud: unlawful payment processing

20 years

20

SHALON

Conspiracy to operate an unlicensed money transmitting business

Five years

21

SHALON

Operation of an unlicensed money transmitting business

10 years

22

SHALON, AARON, and ORENSTEIN

Conspiracy to commit money laundering: Securities Market Manipulation Scheme

20 years

23

SHALON  and  ORENSTEIN

Conspiracy to commit money laundering: Internet Gambling and Payment Processing Schemes

20 years

district_office
usa_name
event_type
judge_name
judge_title
case_number
max_penalty_text
sentence_summary
money_amounts
crypto_assets
statutes_json
timeline_json
press_release_url
https://www.justice.gov/usao-sdny/pr/manhattan-us-attorney-announces-extradition-defendants-linked-massive-network
extras_json
participant_id name role title organization location age nationality status
2558 Preet Bharara prosecutor U.S. Attorney U.S. Attorney's Office New York
2559 Diego Rodriguez investigator Assistant Director-in-Charge FBI New York
2560 David E. Beach investigator Special Agent in Charge U.S. Secret Service New York
2561 Gery Shalon defendant Savyon, Israel 31 Georgian and Israeli extradited
2562 Ziv Orenstein defendant Bat Hefer, Israel 40 Israeli extradited
2563 Joshua Samuel Aaron defendant Moscow, Russia 31 U.S. citizen indicted
2564 Kevin Nathaniel Fox judge U.S. Magistrate Judge Manhattan federal court New York
2565 Eun Young Choi prosecutor Assistant U.S. Attorney U.S. Attorney's Office New York
2566 Sarah Lai prosecutor Assistant U.S. Attorney U.S. Attorney's Office New York
2567 Edward Diskant prosecutor Assistant U.S. Attorney U.S. Attorney's Office New York
agency_id agency_name abbreviation role office_location agents_mentioned contribution
1611 U.S. Attorney's Office for the Southern District of New York SDNY prosecution Southern District of New York Overseeing prosecution and handling legal proceedings
1612 Federal Bureau of Investigation FBI investigation New York Field Office Diego Rodriguez Led investigation into hacking crimes and arrests
1613 U.S. Secret Service USSS investigation New York Field Office David E. Beach Assisted in investigation and provided support
1614 Office of the State Attorney of the Israel Ministry of Justice’s Department of International Affairs international legal assistance Provided support and assistance in extradition
1615 Israel National Police investigation Assisted via Cyber Unit - Lahav 433 in investigation
1616 Securities and Exchange Commission SEC regulatory assistance Provided assistance in the case
1617 Immigration and Customs Enforcement - Homeland Security Investigations ICE-HSI investigation Assisted in the investigation
1618 Financial Industry Regulatory Authority FINRA regulatory assistance Facilitated information-sharing among victim institutions
1619 National Credit Union Administration NCUA regulatory assistance Provided assistance in the case
1620 Office of International Affairs of the U.S. Department of Justice DOJ-OIA international legal coordination Assisted in extradition proceedings
1621 Financial Services Information Sharing and Analysis Center FS-ISAC information sharing Aided investigation by facilitating information-sharing
1622 U.S. Marshals Service USMS extradition Assisted in extraditing defendants to the U.S.
charge_id charge_description statute severity max_penalty fine_amount defendant status participant_id cl_docket_id count_num is_1960 verified_1960 source updated_at
1327 Conspiracy to commit computer hacking Five years SHALON and AARON indicted 0 enrichment
1328 Computer hacking Five years SHALON and AARON indicted 0 enrichment
1329 Computer hacking Five years SHALON and AARON indicted 0 enrichment
1330 Conspiracy to commit securities fraud Five years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1331 Conspiracy to commit wire fraud: Securities Market Manipulation Scheme 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1332 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1333 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1334 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1335 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1336 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1337 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1338 Securities fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1339 Wire fraud 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1340 Conspiracy to commit identification document fraud 15 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1341 Aggravated identity theft Mandatory two years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1342 Unlawful internet gambling enforcement act conspiracy Five years SHALON and ORENSTEIN indicted 0 enrichment
1343 Unlawful internet gambling enforcement act Five years SHALON and ORENSTEIN indicted 0 enrichment
1344 Operation of illegal gambling business Five years SHALON and ORENSTEIN indicted 0 enrichment
1345 Conspiracy to commit wire fraud: unlawful payment processing 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1348 Conspiracy to commit money laundering: Securities Market Manipulation Scheme 20 years SHALON, AARON, and ORENSTEIN indicted 0 enrichment
1349 Conspiracy to commit money laundering: Internet Gambling and Payment Processing Schemes 20 years SHALON and ORENSTEIN indicted 0 enrichment
1346 Conspiracy to operate an unlicensed money transmitting business Five years SHALON indicted 1 enrichment 2026-09-16T19:46:00+00:00
1347 Operation of an unlicensed money transmitting business 10 years SHALON indicted 1 enrichment 2026-09-16T19:46:00+00:00
3411 operate an unlicensed money transmitting business Five years 21 SHALON Operation of an unlicensed money transmitting bus 1 press 2026-09-16T19:46:00+00:00
3412 unlicensed money transmitting business Five years 21 SHALON Operation of an un 1 press 2026-09-16T19:46:00+00:00
fin_id action_type amount currency description asset_type defendant status
1299 forfeiture proceeds of the offenses SHALON, AARON, and ORENSTEIN pending
victim_id victim_type description number_affected loss_amount geographic_scope vulnerability_factors impact_description
392 financial institution U.S. financial institutions U.S. Suffered massive network intrusions and the largest theft of customer data in history, enabling securities fraud schemes.
393 financial institution U.S. brokerage firms U.S. Targeted in network intrusions to facilitate securities fraud and market manipulation.
394 business major news publication U.S. Subject to network intrusions as part of the hacking operations.
395 business other companies U.S. Affected by network intrusions supporting securities fraud and payment processing schemes.
quote_id quote_text speaker_name speaker_title speaker_organization quote_type context significance
2674 Gery Shalon and Ziv Orenstein, two of the alleged perpetrators of the cybercrime that we described at the time of their arrests as securities fraud on cyber steroids, have been successfully extradited from Israel to the United States. For the alleged hacks into numerous U.S. companies, including the largest theft of customer data from a U.S. financial institution in history, in furtherance of their securities fraud, Sharon and Orenstein will now face prosecution in a U.S. court. Preet Bharara United States Attorney for the Southern District of New York U.S. Department of Justice statement Announcing the extradition of Gery Shalon and Ziv Orenstein Highlights the severity of the cybercrimes and the significance of the extradition
theme_id theme_name description significance related_statutes geographic_scope temporal_aspects stakeholders
1839 Computer Hacking Massive network intrusions into U.S. financial institutions, brokerage firms, and financial news publishers, including the largest theft of customer data from a U.S. financial institution in history. Enabled securities fraud and market manipulation schemes by exploiting stolen data. International Recent development Law enforcement (FBI, USSS), financial institutions, victims
1840 Securities Fraud Market manipulation schemes using stolen data to execute securities fraud, including coordinated trading based on insider information. Central to the charges and the primary criminal objective of the defendants' hacking activities. International Recent development SEC, financial institutions, victims
1841 Money Laundering Conspiracies to launder proceeds from securities fraud and gambling schemes through illegal payment processing and unlicensed money transmission. Critical to obscuring the illicit origins of funds and facilitating global criminal operations. International Recent development Financial institutions, regulatory bodies, law enforcement
1842 International Cooperation Collaboration between U.S. and Israeli authorities to extradite defendants and investigate cross-border cybercrimes. Essential for apprehending and prosecuting non-U.S. citizens involved in transnational crimes. International Recent development U.S. and Israeli law enforcement, international agencies
1843 Wire Fraud Schemes involving fraudulent wire transfers and communications to execute securities manipulation and payment processing fraud. Integral to the execution of broader financial crimes and part of the defendants' multi-faceted fraud network. International Recent development Law enforcement, financial regulators
1844 Unlawful Gambling and Payment Processing Operation of illegal gambling businesses and unlicensed payment processing systems to launder money and evade regulations. Provided additional revenue streams and infrastructure for the defendants' criminal enterprises. International Recent development Financial regulators, law enforcement
1845 Identity Theft and Document Fraud Aggravated identity theft and conspiracy to create fake identification documents to conceal criminal identities and activities. Used to evade detection and prosecution by masking the defendants' true identities. International Recent development Law enforcement, victims
1846 Unlicensed Money Transmitting Operating an unlicensed money transmitting business to facilitate illegal financial transactions. Part of the broader money laundering strategy to move illicit funds without regulatory oversight. International Recent development Financial regulators, law enforcement

CourtListener / RECAP

No linked CourtListener docket yet.